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From the Editor: Changes 


■ M Me've just wrapped up our second-ever MacTech Conference. The event was a great few 
l#|#days of teaching, learning and connecting with peers. We’re already planning ways to make 
W W the event even better in 2012. Tf you joined us, we thank you. If not, we want to see you in 
2012, In either case, check out some pictures of the event starting on the back page of this issue. 
Until then, though, we have our monthly issues packed with information. 

This month, we take another look at the state of virtualization on the Mac, between lhe two 
commercial leaders: VMWare and Parallels. Now, with the ability to virtualize OS X Lion, virtualization 
options and performance is more important than ever before. With the ability to snapshot, test and 
restore, Apple techs finally have similar abilities to other platforms; take advantage of that 

In this month's Developer to Developer, Boisy Pitre talks about plug-ins. Plug-in bundles are a 
great way to extend your main application at will, with no changes and no recompile. 

In a special series, new author Russell Poucher brings you the ins and outs of Mobile Device 
Management (MDM). “MDM" is an umbrella term that includes the software and distributions methods 
that enable you to manage iOS devices. With their rise in popularity in businesses, check out, "Mobile 
Device Management (MDM) Primer," to understand what’s out there and how to get started. 

Prolific MacTech author Mihalis Tsoukalos brings us two articles this month. First, an introduction 
to creating a book using LaTeX, a mature type-setting language. LaTeX lias been used over the years 
for short documentation all the way up through full books. Mihalis also brings us an introduction to 
CoreLocation by way of an iOS application that can determine its location using several methods. If 
you were ever even interested to find out how location services worked, this is the place to start. 

With everything we do, we"re always looking to improve. If that's our MacTech Conference , Boot 
Camp or In Depth events or our Magazine, the rule is the same: make the next one better than tire 
last. Part of that relies on you, the attendee or reader. If you’re looking for a particular topic to be 
covered or have any suggestion, Id love to hear it. Please feel free to contact me at exec 
diior@moctech.com. Until next month, keep learning and keep practicing. 


Edward Marczak, 
Executive Editor 
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Developer 

by Boisy G. Pitre 



Plug It In! 

Enrich your Mac OS X 
applications with plug-ins 

V_ J 

Introduction 

As a developer, you may have wondered how to 
extend your Cocoa application’s functionality beyond just 
the “traditional" method of writing more code and 
recompiling. How convenient would it be to have a 
"pluggable" way to bring more features to your application 
without needing to redistribute your application binary? 
What if you could leverage the contributions of your more 
programming-savvy customers, convincing them to write 
software to extend and enhance your application? 

It turns out that there is a way to do this and more, 
and you don’t have to give out your source code to make it 
happen. Apple has given application developers the basic 
and techniques to develop and integrate bundles of code in 
a wav that extends Cocoa applications quickly and easily. 
These bundles, also known as plug-ins, can add value to 
your application and transform the way you distribute your 
software. It’s what well be looking at in-depth in I his 
month’s Developer to Developer. 


Revenue: plug-ins can be sold, generating additional 
revenue 

In short, by extending your application to allow plug¬ 
ins, you are giving your customers more options. It also 
makes your application richer and adaptable. Enthusiastic 
customers who use your product faithfully and who have the 
knowledge and willingness to program can even write their 
own plug-ins, assuming you provide them the 
documentation to do so. This makes your application more 
marketable and valuable, and can form an ecosystem for 
continued grow th. All the w r hile, you can protect your most 
valuable asset, your application source code. 

Anatomy of a Plug-in 

From the point of view of a Finder window 7 , a plug-in 
looks deceptively like a single file when in fact it is a multi- 
directory, multi-file entity much like an application bundle. 
It contains code and resources organized in a standard w r ay 
so that it can be loaded and interlaced directly into an 
interested application. Figure 1 shows a high level view of 
this organization. 


Info, pi 1st 
Resources 
Mylmage.png 



Figure 1 - Plug-in Anatomy 


The Advantages of Plug-Ins 

There are many reasons we developers might want to 
introduce a plug-in architecture into their applications. Here 
are just a few: 

Convenience: new functionality can be introduced 
quickly and easily by you or by third-parties 

Privacy: your application can be extended without 
revealing your source code 

Stability: your application can remain stable and tested, 
while plug-ins can be introduced or removed easily for 
testing 

Modularity: unwanted features can be quickly 
eliminated for decreased resource usage 


Inside of the plug-in bundle exists the Contents folder. 
Digging further down, we find an Info.plist file which 
contains various keys and values, as well as a Resources 
folder (for images, sounds, XIB files and the like) and finally 
the MaeOS folder which holds the actual binary code file for 
the plug-in. 

Xcode allows you to create plug-ins through the bundle 
template (see Figure 2). For our examination of bundles in 
this article, we“11 use a pre-coded example plug-in r 
appropriately named DDExamplePlugln, as well as the host 
application DDApp. Both are available on MacTech's FTP 
site as “ready to load 7 ’ Xcode projects* The second project, 
DDApp, is the host application that will load the plug-in and 
is also available in the package. Now would he a good time 
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Figure 2 - Creating a bundle in Xcode 


Getting An Application 
“Plug-in Ready” 

For the most part, applications don't just come out of the 
chute ready to accept plugdns, so tfs necessary to do some 
planning and design. Some important questions come up in 
at this point; How w ill the plug-in work w r ith our application? 
Will it be a visual or non-visual plug-in? Will it need to access 
any data from the application itself? How w ill the user interact 
with the plug-in? How will load and save any defaults? 

For our example plug-in, DDExamplePlugln, well load 
it up with expectations. It will be a visual plug-in with a 
single window; the user will select the plug-in from a menu 
named “Plugins 1 ’; the plugdn will obtain some data from the 
application, and the plug-in will load and save its window's 
visible state. But first, let’s see how DDApp and 
DDExamplePlugln will come together. 

Figure 3 illustrates the connectivity between the DDApp 
application and the DDExamplePlugln bundle. Focusing on 
DDApp first, we create a class called DDPluglnManager. 
One instance of this class wall be instantiated, and this object 
will be responsible for loading and unloading plug-ins and 
introducing them to the application. We’ll take a closer look 
at this class shortly. 

The DDExamplePlugln bundle will house the plug-in 
itself, and will have its own class named DDPlugln. This 
class will be a gateway or bridge class to the main 
application, and allow the bundle to make calls into the host 
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application for purposes of obtaining data. This class is 
specifically written to call into DDApp, and in fact could be used 
by multiple plug-ins. 



Figure l - App and Plug-In Interaction 


The Plug-In Manager Class 

Now it’s time to take a peek under the hood. Load up 
DDApp in Xcode and take a lcx)k at DDAppDelegatem 
DDPluglnManager is an Gbjective-C class that is part of our 
DDApp application. Its responsibility is to load and unload plug¬ 


ins and to populate the Plugins menu that will appear in the 
menu bar. DDApp simply instantiates DDPluglnManager in its 
applicationDidFinishLauching: method, and conversely 
releases the instance in its applicationWillTerminate: 
method. 

- (void)applicationDidFinishLauDching;(NSNotifieation 
•JaNotification; 

[ 

// Our plug-in manager is brought up here*,. 
pluglnManager = [DDPluglnManager new]; 

I 

- (void}applicationWillTeruinate:[NSNotifieation 
*)notification; 

1 

[pluglnMauager release]: 

1 

Now, let’s turn our attention to the DDPluglnManager.m file. 
The heavy lifting of the plug-in manager class happens in the 
loadPluglns method. Here, an array which will hold the 
available plug-ins will be allocated, and two calls will lie made to 
another method, loadPluglnsFromPath: The first call will 
tie made to search for plug-ins in our application’s own bundle. 
Tile second call will be made to search for plug-ins in our home 
folder's Library/Application Support/DDApp/Pluglns 
folder. This approach allows us to embed plug-las in our own 
application bundle if we so choose, as well as in tile well-defined 
path for plug-ins located within our home directory. 

Once the loadPluglns method loads plug-ins from these 
two locations, it calls setupMenu to actually populate the Plugins 
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menu. This method will send die protocol-defined mermltem 
method to each plug-in. If at least one plug-in supports sending 
a valid menu item, then the Plugins menu is setup; otherwise, no 
menu will appear. The plug-in itself handles the menu item 
action method and any shortcut key it desires to employ. 

The Plug-In 

Let's delve into our plug-in class, named DDExamplePiugln. 
Open the DDExamplePlugln.h header file and take note of its 
superclass: NSWindowController. This particular superclass 
was chosen because our plug-in’s main point of interaction is a 
window. Your plug-in may not be window-centric, so you could 
derive from NSObject or some other appropriate class, in fact, 
now is a good time to segue into a discussion of plug-in design 
choices. There are two: namely, (1) create a plug-in specific 
abstract class with specific methods that must be overridden, or 
(2) allow the plug-in to be derived from any class. In my testing. 
1 have found the first approach to a bit limiting. Instead, Pve 
chosen the second approach: to allow the author to subclass the 
plug-in from any Objective-C class, and use an Objective-G 
protocol to ensure that certain methods are always implemented 
by the plug-in. 

Tile heart and soul of our plug-in is in DDExamplePlugln.m, 
This is the main class that performs all of the functionality of the 
plug-in. We have several important methods here. First, our 
init method exists, wherein a NIB file, DDExampie is loaded. 
This NTB file contains a window with an embedded NSTextField 


that we will use to show a secret hexadecimal key. In the init 
method, we also check our standard defaults (shared with the 
hosted application) to see if we want our window to be shown 

Next come four very important methods that are dictated by 
the DDPlug In Protocol protocol defined in DDPluglah: 

(NSString *)name; 

- (fJSString *)description; 

- (NSlntegerJapiVersioE: 

- [NSMenuItein *) menu Item; 

Our plug-in is obliged to implement these methods and 
return sensible values, which we do. The name method returns 
the name of the plug-in, while the description method 
returns a string describing the plug-in’s purpose. The 
apiVersion method returns a version number which can be 
used by the plug-in manager in the application to determine 
compatibility. Finally, the menu!tern method returns a pointer 
to an NSMenuItem object which represents the menu item that 
will appear in the application’s Plugins menu. Your plug-in may 
or may not w r ant to even bother with a menu item, and if not, it 
should return nil. 

One additional method worth studying is the 
windowDidLoad method. It is called when die window is open 
lor the first time. Notice that it calls into DDPlugln, a class 
which vends a singleton, through the sharedObject method. 
This class is used by our plug-ins to obtain services from die 
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main application. Think of DDPlugln as a bridge between your 
application and your plug-in. Anything that the plug-in might 
need to acquire from the main application can be done through 
methods implemented here. 

Take a look at DDPlugln, m, specifically the "service methods" 
section. These are methods which your plug-in will use to 
interface to the main application. In our example, we have only 
one service method: secretKey which calls a method of the 
same name in the application delegate (see DDAppDelegate.m). 
The idea here is to use the DDPlugln class as a gateway to the 
main application for the purposes of obtaining information (in this 
case, a key that could be used for some encryption method in the 
plug-in). We could have easily made the call to the application 
delegate's secretKey method in our DDExamplePlugln class, 
but having an intermediary object to perform the actual call gives 
us some flexibility in ease we want to change implementation 
details. For that reason, I highly suggest you use a class modeled 
after DDPlugln for your own plug-in projects, 

Ideally, tire DDPlugln class could reside within a framework 
which would be linked against the plug-in, so the 
implementation file would lie hidden from the user. For our 
purposes here, we ve just included it directly in the project. 

Tying It Together 

Now it’s time to build and run. With both Xcode projects 
loaded, build DDExamplePlugln first. Now, build DDApp. You’ll 
notice that as part of the build process, DDExamplePlugln is 


placed within your home folder’s Library /Application 
Support/DDApp/Pluglns folder. This is done from within 
Xcode by checking “Deployment Location” and indicating the 
"Installation Directory, 1 ' In your case, it will reflect your home 
folder, even though my name is shown in Figure 4, 

Finally, it’s time to run DDApp. When you do so t you will 
see the Plugins menu in the list of menus on the menu bar. 
Selecting it will show the name of our plug-in: DDSecreL 
Selecting this menu option will cause a window to appear 
showing the hexadecimal string which is the key, obtained 
through the DDPlugln class and ultimately, from our DDApp 
application delegate. 


ft n_ „ __T*ig»t frife _ 
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Figure 4 - The plug-in's installation options in Xcode 
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Taking Plug-Ins To The Next Level 

We are working with an example plug-in inside of a 
contrived environment here, yet there's plenty more that can 
be done to make plug-ins easier to use and integrate. One 
way is to give your application’s plug-in its own extension 
{.bundle is the default) and extend your application to (a) 
give your plug-in its own icon and Cb) respond when a user 
double clicks on a piug-in via the Finder. Your application 
would, upon being notified of the plug-in being clicked, 
copy the plug-in to its proper folder, then force the plug-in 
manager to unload and reload. This additional work would 
prevent users from having to manually copy the plug-in 
bundle. I’ll leave this extra work as an exercise to the 
reader 

Summary 

Plug-ins are a great way to expand the functionality of 
your application in a modular way. We've explored the 
design of a plug-in manager that bolts onto your 
application, as well as a plug-in project that performs a 
simple but demonstrable function: displaying text provided 
by the application, inside of a window. With the example 
code provided, you have a great start to implementing plug¬ 
ins in your own applications. 
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How I used LaTeX to typeset a book 




by Mihalis Tsoukalos 



Introduction 

Some years ago, I wanted to 
typeset a book that had 
approximately 350 pages. The big 
issue was whether to use LaTeX or 
Adobe InDesign CS3.1 finally used 
LaTeX and tills article describes my 
working environment as well as 
some of the modifications and 
additions that I made to the default 
book LaTeX style. 

Although this article assumes 
that you are already familiar with 
LaTeX, if you have never heard of 
LaTeX and you wonder why I even 
considered it T you should know' 
that many books that are 
published have been typeset using 
it, especially books with lots of 
scientific formulas or other 
technics 1 info rmation , 

A little LaTeX 
history 

LaTeX is based on TeX, 

Donald Knuth created TeX in the late 1970s as a computer 
language for use in typesetting, Donald Knuth wanted to write 
some books (!) on computer algorithms but no typesetting 
system was acceptable for him so he created TeX, ft reminds us 
a lot tire story of the C programming language that created for 
writing the UNIX operating system. As TeX had many low level 
commands it was difficult to use so Leslie Lamport decided to 
make it a little easier He programmed many higher-level TeX 
commands, and that was the creation of LaTeX. Today, most 
people use LaTeX, 


Figure 1: The TextMate editor 


How good is LaTeX? 

For those of you that are not familiar w r ith LaTeX but you 
are considering learning it, the following list tells the advantages 
of LaTeX: 

If the default styles are sufficient for you, you just start 
writing! 

It is fast to type and edit your text as you just type plain 

text. 

You do not need a very fast computer to run LaTeX, 

You can easily exchange LaTeX code between different 
platforms. 
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It is free and the LaTeX community is active and willing to 
help you. 

The output looks truly professional and classy, LaTeX is a 

pro tool 

The disadvantages of LaTeX are the following: 

You have to compile your LaTeX code to see its output. In 
TextMate you can “compile and view” using the command-R 
shortcut. You can even compile your LaTeX code from the 
UNIX command line but it is highly recommended that you use 
a GUI application as it makes life easier. Every GUI application 
has its own shortcut for compiling and viewing LaTeX axle. 

It takes some time and experimentation to set up or change 
default document styles. 

My LaTeX Environment 

My editor of choice is TextMate (see figure 1) so I wrote 
the whole book using TextMate. Figure 2 shows the TextMate 
settings in order to support LaTeX. 

I am currently using the MacTeX LaTeX distribution 
although 1 used a different one while writing the book. I also 
use Skim for viewing the PDF LaTeX output. The main reason 
for using Skim instead of Preview is its speed and that it 
integrates well with TextMate. 
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Figure 2: TextMate settings to support LaTeX 


TextMate depends on Python to am. My current TextMate 
version (1.5.10) needs Python l to work, so when I switched to 
Python 3 (which is not fully compatible with Python 2) on my 

Mac, 1 got the following error message in TextMate: 

File "/Appli cat ions/TextMate . a pp/Contorts/Shared Support/ 
Bundles/LaTeX.tmbundle/SuppQrt/bin/tejcMate.py", line 55 
print "Using Tiger Compatibility version of Popen class" * 
SyntaxError: invalid syntax 
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The solution to this problem is either to go back to Python 
2 or change the first line of the texMate.py file found inside the 
TextMate application (its long full path is shown in the error 
message). Its first line is now as follows (note that 1 am using 

the MacPorts version of Python): 

/opt/locat/bin/pythou2,7 -u 

My main LaTeX code 

This part of the article talks about the LaTeX code (I 
deleted some text to make it smaller) of my central LaTeX file 
(book.tex). The LaTeX code can be downloaded from the 
MacTech source repository at ftp://ftp.mactech.conu 

This LaTeX code is the glue for the various book files but 
it also contains some text and all the style definitions. Instead 
of using a big and unmanageable LaTeX file, 1 put the book 
chapters and the three appendices in separate files using the 

include LaTeX command as follows: 

Vincludefchll 

VincludelapA) 

LaTeX will search for files named cblJex and apAJex. 
Each chapter or appendix LaTeX file has the following format: 

% Chapter 10 

Vchapter i Advanced Widget Techniques] 

Mabel f chi QI 
Vminitoc 


Vbegin[center] 

VEuge $\ast$ $Vast$ $\ast$ 

Vend[center! 

The \hiM{iblOJ command is for creating a reference to 
the given point. The reference can be accessed using the 
~\rejJcb W} command and it will automatically replaced by the 
page number The \cbflpterQ command is a built-in LaTeX 
sectioning command. Sectioning commands are used lor 
defining the various hierarchical structural uniLs of a document. 
The \heginf} - \enctfj commands define a block of LaTeX code 
that have a common attribute. 

Using the following LaTeX code, I created a new style 
called WidgetCode for formatting code: 

Vusepackageirelsize, color, fancyvrb] 
VCustamVerbatimEnvlronment' WidgetCode 3 I Verbatim ] 

l numbers=left* frame-lines h framerule-1pt + ml ecolor“\color {bln 
e] , frame sep=4mtm labei= I [VMaon] \Slin I ] 

The use of the WidgetCode style inside LaTeX Ls as 
follows: 

Vbegin[WidgetCode! [fontsize-Vrelsize ' 1]] 

<div class="DItext w > 

Cintput class="DItext" type^text" id =,f QurInfo" 

readonly> 

<7div> 

Vend[WidgetCode1 

whereas the required JavaScript code is the following: 

Vbegin[WidgetCode!„fontsize-Vrelsizei 11] 

document,getElementById{"OurInfo").innerHTML - OUTPtlT_DATA; 
Vend[Wid getCodeI 
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Figure 3 shows the formatted output of the code and has 
two code parts. 





1 <dJLv 

2 < lot prut clita*- r DLt®xt H id-^Durlnio 1 ' rsadstly^ 

» </di*> 

- O - 

whereas the required JavaScript code is the following: 

-U - 

docuiarat - govElBMfivByldCOurlaf o"3, LnMrHTHL ■ OUTPUT _ DATA; 

-O- 


Figure 3; The WidgetCode LaTeX style* 


Not only does tliis style save me time, but 1 also find it very 
elegant. If you want to make a global change to the output 
format of code in your txiok, all you have to do is go to its 
definition, make die changes anti re-compile die book. Also, if 
you want to create a new style similar to WidgetCode all you 
have to do is copy and paste the WidgetCode definition, choose 
a different name and make die modifications you want, 

I also wanted a more fancy chapter heading (figure 4) so I 

used the existing fncychar package as follows; 
\usepadkagetBjornfitrup3 (fncychapI 


Creating Widget plugins using ObjectJve-C 

Figure 4: The chapter heading format 


Also, at the beginning of each chapter I wanted a TOC 
part. The following minimal LaTeX code adds the TOC 

functionality: 

Yusepackage tminitoc1 
\setcoimter{minitocdepthl{lI 

But it should be combined widi the \dominitoc command 
diat should 1>e used once to turn on die mini TOC functionality. 
You should also type \minitoc at the beginning of each 
chapter to actually add the contents. Figure 5 shows the mini 
TOC output for chapter 13- 
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Figure 5: Chapter 13 mini TOC 
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The following LaTeX code changes the header and the 
footer for each page (figure 6), Right pages [ROj (page 108) 
have a different rule whereas left pages flE] (page 109) have 
another rule but both rules put the page number m the header 
of the page. Also the first page of each chapter (JCOJ) (page 
119) has a different rule that puts the page number at the fcxiter 
of it without adding any header information. The indentation in 
the code is for better formatting and viewing the LaTeX code 

and is not compulsory. 

\ r ene we oma a nd \ h e ad r ul e 

m 

\color [gray][0.51 \hrule height Ipt 

width\beadwidth 

\vspace(- 4 pt)li 

\fancyhead[RQ][% 

{\hfseries\S\ \thesection\ \te>:tbar\ 

\LARGE\tbepage\no rraaIsize\ \textbar1 
1 

\fancyhead[LE ]\% 

fYbfseries\textbar\ \LARGE\thepage\normaIsize\ YtextbarV 
\S\ \thesection\ \taxtbar\ Ueftmarkl 
I 


I 108 | § 7.5 t I'ragrammmg WldgEta naiug l J HU 

j T.fl 1109 i 

119 


Figure 6: Page header and footer samples 


Last, I changed the default picture caption format using the 

following LaTeX commands: 

\usepackage[caption I 

\DeclareCaptianLabelSeparator t par I[\part 

\DeclareCaptionFormat[dashedlabel}[\textbfI - I #1 \textbff-" 

)# 2 # 3 I 

\captionsetup!forroat^dashedlabel,margin=lcm,singlellnecheck^t 
rue, font^sui 

all, labelfont” [sc,bf,1, textfont=it, j ua tifi cat ion" cent e r last, 1 
abelaep=par} 

Figure 7 shows the caption output format. 


Vfancypagestyle[plain] 1% 

\fancyhf[} 

\fancyfoot[CO] 1% 

[\bfseries\LARGE\thepage] 

l 

Vrenewcommand(\headrulewidth][Opt 1% 

i 


— Figure 8.1 — 

How Cocoa and Carbon ore assimilated into tke 

Figure 7: Image caption format 
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Summary 

This article did not tell you everything that you will need 
to create a book using LaTeX but it certainly told you that this 
is achievable and relatively easy! 

Did I regret using LaTeX? Not at all! If 1 ever want to write 
another book, 1 will certainly consider LaTeX again and 1 think 
that you should consider it too! 

Web Links 

LaTeX project: http://www.latex'pro ject.org/ 

Comprehensive TeX Archive Network: http://wwwxtan.org/ 
Mac TeX Users group: http://www.tug.org/mactex/2011/ 

Skim: http://skim-app. sourceforge .net/ 

TextMate: http://macromates, com/ 

The LaTeX Companion , 2nd Edition t Addison Wesley, 2004 
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Mobile Device 
Management (MDM) Primer 

Your guide to getting started with managing 
iOS devices 

^ by Russell Pouch&r 


Mobile Device Management (MDM) software secures, 
monitors, manages and supports mobile devices deployed 
across mobile operators, service providers and enterprises. 
MDM functionality typically includes over-the-air distribution of 
applications, data and configuration settings for all types of 
mobile devices, including mobile phones, smartphones, tablet 
computers, ruggedized mobile computers, mobile printers, 
mobile POS devices, etc. These policies apply to both company- 
owned and employee-owned devices across the enterprise or 
mobile devices owned by consumers. 

By controlling and protecting the data and configuration 
settings for all mobile devices in the network, MDM can greatly 
reduce support costs and business risks. The intent of MDM is 
to optimize the functionality and security of a mobile 
communications network while minimizing cost and downtime. 

With mobile devices becoming ubiquitous and applications 
flooding the market, mobile monitoring is growing in 
importance. Numerous vendors help mobile device 
manufacturers, content portals and developers, test and monitor 
the delivery of their mobile content, applications and services. 
This testing of content is done real time by simulating the action 
of thousands of customers and detecting and correcting bugs in 
the applications, (www.wikipedia.com) 



Figure 1 - Managed Devices 


Implementation 

Typically, MDM solutions include a server component, 
which sends out the management commands and controls to 
the mobile devices, and a client component (called profiles), 
which runs on die target device and receives and implements 
die management commands. In most, true, MDM solutions, die 
client software does not need to be installed. It is pan of die 
profile that die device is to lx* enrolled in. 

With the proliferation of mobile devices reaching the 
masses, the management of mobile devices is ever evolving over 
time to meet the needs of the users, widi new software and 
hardware being distributed, rapidly. No longer is it required to 
have a hard connection to the device or install a SIM in order to 
make changes and updates; scalability problems may just 
become a thing of the past. 

Central remote management, using commands sent over 
the air, is here and now. An administrator needs only access to 
a web portal, from a desktop, laptop or another mobile device. 
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to update or configure any one device, group or groups of 
devices. This obviously provides scalability benefits particularly 
useful when the fleet of managed devices is large in size. 

Prime functionality of and MDM server often includes the 
following features: 

* Firmware and/or base OS over the air updates 

* Remote diagnostics 

* Remote configuration and provisioning 

* Security, including complex passcode requirements 

* Backup/restore functionality, both local and remote 

* Network usage and end-user support 

* Server deployment, management and configurations 
1 Mobile asset tracking and management 

■ Remote lock and wipe 

1 Local device provisioning 

* Software installation, updates and maintenance 

* Data provisioning and feeds 

* Troubleshooting and diagnostic tools 

■ Policy application (similar to Group Policy on Active 
Directory or Managed Clients on Open Directory) 

* Logging and reporting 

* Remote control and administration 

* Location tracking 



CONFIG 


Figure 2 - Device Configuration 

Device Configuration Overview 

There are many factors that need to be considered before 
one can determine how their organizations' IT staff is going to 
configure and support the needs of their users. 

* Some organizations allow the user to handle the entire 
configuration. If IT gets involved, at all, it is typically after the 
fact to add in their email or setup the VPN tunnels. 


Convert DVI to miniDisplayport 


Gefen introduces a new solution for enabling computers with DVI connectors to utilize 
new Appie displays using the MiniDisplayport connection. The converter is a low cost 
solution available that makes the legacy computers 



useful for the foreseeable future 









* A second way that organizations may setup the devices is to 
build tile initial payloads, deploy the image out and allow 
the users full access to make changes as they .see fit. From a 
security perspective, this “set it and forget if scenario turns 
full control back over to the users to maintain, making 
support much more difficult, 

* The third way (which is the target of this article) is to setup 
the device, from the ground up, and enroll it into one of the 
many MDM solutions on the market today. 

User configured/owned device (The 
“No Management” option) 

When an iOS device is manually configured, the end user 
enters settings such as account name, password, and various 
server settings on the device itself. These end users may be 
responsible for updates to die iOS, backups, security, etc. 

Settings that end users can manually configure include: 

* Microsoft Exchange AetiveSyne accounts (supporting 
Exchange Server 2003, 2007 and 2010) 

■ Standards-based email, contacts, and calendars (IMAP, POP, 
CardDAV and CalDAV) 

• VPN security settings (Cisco IPSec, L2TP t PPTP, SSL VPN) 

■ Wi-Fi networks SSID’s and passwords (any standard 802.1 lx 
wireless network) 

• Configuration of security settings (requirement of passcode, 
simple vs. complex passcode) 

• Restrictions for certain apps and services (locking down 
Safari, YouTube, iTunes, installation of apps, deletion of 
apps, allowed content) 

Reasons for Mobile Device 
Management 

Organizations typically opt for a managed approach of 
devices to ease the job of IT departments. This also provides a 
consistent experience for end users. In a traditional sense, the 
managed approach used on desktop and laptop machines is 
known as Group Policy (GPO) on the Windows,/Active 
Directory side, and Managed Preferences under OS X (MCX) on 
the Macintosh/Open Directory side. 

MDM is a set of capabilities built into iOS 4 and above that 
allows a managed approach. It delivers a comprehensive set of 
tools that IT departments can use to wirelessly configure and 
update settings, monitor compliance with corporate policies, 
secure devices, guide users, provide consistency and even wipe 
or lock managed iOS devices. 

IT departments can exercise tight controls over the devices, 
whether owned by the organization or by the individual, all 
based on the profile delivered to the device. 
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Figure 3 - Configuration Profiles 


Configuration Profiles 

Configuration profiles are lists of settings that IT 
departments use to quickly set up iOS devices. These profiles 
may he setup to configure end users' devices to access Microsoft 
Exchange servers, the corporate VPN tunnel, Wi-Fi networks 
and corporate resources. Configuration profiles also give IT the 
ability to lock the settings. 

Configuration profiles can he created with the iPhone 
Configuration Utility 7 (IPCU), a free application for Mac OS X 
(10.6.x and 10.7.x) and Windows (XP, Vista and 7). 
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Figure 4 — iPCU Configuration Profiles 


What are configuration profiles? 

A configuration profile is an XML file that can be used to 
distribute configuration information to iOS devices. IT 
administrators will use these configuration profiles to configure 
specific* single or multiple, settings for iOS devices. Each 
configuration profile contains one or more “payloads” which 
detail out all of the settings that one can possibly set on an iOS 
device, which include: 

• Passcode — requirement of passcode, simple vs. complex 
passcode 

• Restrictions — locking down Safari, YouTube, iTunes, 
installation of apps, deletion of apps, allowed content 
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if (you_have_a_website == true) { 

measure_roi = easy; 
contact_visitors = yes; 
real„time = of_course; 
try_visistat = free; 
setup = no_brainer; 


} 

else { 


no_clue = true; 
i_use_google = sorry; 


} 


//REAL-TIME WEBSITE TRACKING 
goto = www.visistat.com; 
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■ Wi-Fi — networks SSID’s and passwords (any standard 
802.1 lx wireless network) 

• VPN — Cisco IPSec L2TP, PPTP, SSL VPN 

* Email — Standards-based email, contacts, and calendars 
(IMAP, POP, CardDAV and CalDAV) 

* Exchange ActiveSync — supporting Exchange Server 2003, 
2007 and 2010 

• LDAP — directory sendee settings 

• CalDAV — calendar service settings for shared calendars 

• CardDAV — group address book 

• Subscribed Calendars - read only access to shared calendars 

• Web clips — URL's to a specific website, shortcut 

* Credentials — PKCS1 and PKCS12 certificates to install on the 
device 

* SCEP - Simple Certificate Enrollment Protocol aEows the 
device to obtain certificates from a certificate authority 

* Mobile Device Management - configures the device so that 
its configuration is managed over the air by an MDM server 

* Advanced - Cellular network settings (APN) 

Best Practices for Protecting Configuration 
Profiles 

Administrators should sign and/or encrypt a configuration 
profile to prevent it from being altered or viewed. You can also 
protect a configuration profile by locking iL with a passcode so 
that an end user cant remove it. 
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• None — Creates a plain text .mobileconfig file that can be 
installed on any device. Data is not encrypted and may be 
viewed in any text editor. There is no security in place. 

• Sign configuration profile (good security) — Creates a 
signed .mobileconfig file that can be installed on any device, 
provided the profile hasn't been altered. After installation, 
the profile can be updated only by another profile with the 
same Identtfier and signed by the same copy of iPCU.0 The 
profile is signed with the public key associated with a 
device's identity certificate. This public key can l>e obtained 
by connection through USB to a computer running iPCU or 
using over-the-air enrollment. 

• Create and sign encrypted configuration profile for 
each selected device (best security) — Signs the profile 
so it cannot be altered, encrypts all the contents so the 
profile cannot be viewed in a text editor, and can be installed 
only on specific devices that appear in the Devices list. 
Separate .mobileconfig files are created for each of the 
devices you select from die Devices list. In most cases, tiiis 
is the best option to select and offers the highest amount of 
security. 

Locking Profiles 

A profile may also be distributed thafs locked to a device 
so that after it's installed, iL can be removed only by wiping the 
device of all data (full reset) or, by entering a passcode. Locking 
a configuration profile is recommended to prevent end users 
from deleting it from a device. The following three choices are 
available for locking: 

• Always — The end user may remove the profEe at any time. 

• With Authorization — Password is set, and needed, for 
removal of profile. 

• Never — Profile may only be updated w r ith a new version, 
but not be removed 

Installing configuration profiles 

Profiles can be installed via one of several methods: 


Cancel Expon . 


Figure 5 - Setting Security 

Signing and encryption 

The data on a configuration profile can contain sensitive 
information such as account information and passwords. iPCU 
allows three options for exporting out the profiles you have built 
and protect your data, 

A signed profile may only be replaced by another profile 
with the same Identifier and signed by the same copy of iPCU. 
iPCU may be used to both encrypt and sign configuration 
profiles, locking them down to a specific device and preventing 
others from changing or viewing the settings of the profile. 

Security on profiles is available as follows, upon Export: 



Figure 6 - Hard wired USB Connections 


* USB - for smaller installations, this is a viable way of getting 
payloads onto your mobile devices. As the quantity goes up, 
the benefits to this method go down and it becomes much 
more w r ork. This process is, typically, done by IT directly. The 
USB method is meant for low-quantity deployments, such as 
50 or less devices. 
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Figure 7 - Wireless Connections 


* Wirelessly — Profiles can be distributed wirelessly via 
email, website and over the air. When an end user 
downloads the profile from the w r eb or opens it as an 
attachment in Mail, the device recognizes the .mobileconfig 
extension as a profile and begins installation when the user 
taps install. If a passcode has been set on the device, the 
user will be prompted to enter in their credentials. 

* Email - Distribution of profiles via email The end user 
receives the email message on the iOS device and then taps 
on the attachment to install the profile. This process does 
require the end user to accept and install 

* Website - Distribution of profiles via a corporate website 
require the user to follow a specific link to download a 
profile. The end users can navigate to the web page on their 
device and then download the profile onto it. This process 
does require the end user to accept and install. 

■ Over the air — IT can use a secure enrollment and 
configuration process enabled by the Simple Certificate 
Enrollment Protocol (SCEP) to distribute encrypted 
configuration profiles over the air. SCEP does require some 
infrastructure to be setup, but makes the process much 
easier for IT departments to manage in the long rum 

Mobile Device Management lifecycle 

The MDM capabilities build into iOS the functionality for 
MDM on other platforms. Apple has taken the approach that the 
device belongs to whomever hands it is currently in. To that 
extent, there is quite a bit of management we can put into place, 
as long as the end-user continues to allow this management. By 
wiping die device, it is now back in full control of the end user. 

Overall, MDM has four major categories and core 
capabilities: enrollment, configuration, querying, and 
management. 

Prior to the setup of any MDM software, you may need to 
purchase an iOS Enterprise Program account ($299 per year). If 
you have an iOS Developer Program account ($99 per year), 
you must create a new account (separate credentials) to 
complete this process. This, typically, takes about two weeks for 
the qualification/verification. If using Apple's Profile Manager, 
and a few other third-party MDM solutions, an iOS Enterprise 
account may not be needed. Please check with your MDM 
provider for their requirements. 
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Figure 8 - Creating an APNS 


APNS 

The Apple Push Notification Service (APNS) is a notification 
service, provided by Apple, that provides priority to 
notifications. It requires an Internet connection and access to 
Apple's service, When the MDM server sends out a command, it 
is routed tluough APNS, which notifies the MDM server once 
the message has been received by the device. Commands and 
query responses are not sent by APNS. Rather, the APNS is 
telling the mobile device to check in with the MDM server and 
receive its comma nd/queries. 

In terms of security, APNS is only in place to request that 
the mobile devices “phone home" or check in with their server. 
The MDM process continues with enrollment, which is the 
process of establishing a relationship between the device and 
MDM server. Die MDM server sends a notification to the device, 
via Apple, telling it to check in with your server. When die 
device responds, it is provided with a list of actions the MDM 
administrator has slated for the device. These actions can 
include; 

* Enrollment tasks - this typically only happens once, and is a 
URL that the user must follow and accept to load the profile. 

* Configuration tasks — specific policy being pushed to the 
device, include password restrictions, base payload, 
embedded links, mail and security configuration, etc, 

* Query tasks - asking die device to report back on the 
hardware configuration/state and network information 

■ Management tasks - removing settings, data, apps, etc. 

All of these tasks may be set on a repetitive basis, as 
determined by die IT staff 



Figure 9 - Server Configuration 
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Enrollment 

The first step of managing devices through your MDM is to 
enroll. This process allows the server and client to speak with 
each other, establishing a chain of trust. The enrollment process 
is accomplished via one of the means listed above. 

You should, at this point, make the end user aware of the 
implications of opting into a management solution, especially if 
this is their personal device. The administrator of the MDM has 
the capability to wipe any device that is tied into their 
management console. 
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Figure 10 - Creating a Cert 


Configuration 

The next step in the MDM process is configuration of the 
devices through various settings and policies. Once enrolled in 
the MDM t the administrator has the ability to make changes to 
the configuration (profile) and push this out to any and all 
devices, as applicable. The trust relationship lias already been 
set up, so all devices being controlled by the MDM have 
extensive access to make changes. Based on these profiles, IT 
has control over corporate assets and security, ensuring the users 
have proper access to confidential information. 

Remember, IT can control the device and the access it has, 
but you have no way of knowing who the user is at the other 
end of the device. Requiring passcodes, of any type, is a 
necessary part of the process to help control who has access to 
confidential resources. 

MDM device configuration is quite flexible: you can push 
managed configuration profiles at any time to configure a device 
for a new end user or to access a new infrastructure. You can 
also use MDM to remove functionality From a device by revoking 
a configuration profile that contains configuration settings 
necessary for access to corporate Wi-Fi or VPN. 

Managed profiles use ihe same configuration settings 
available with standard configuration profiles (as Is available 
through iPCU); some MDM vendors add minor, additional 
settings, that push the envelope, but may not, necessarily be 
approved by Apple. 
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Device query 

The MDM server can also query devices for details about 
the device itself, network information, installed apps, and 
compliance and security data. Device queries can be scheduled 
on a repetitive basis, or pulled on an as-needed basis to ensure 
that compliance, security and usage policies are being followed. 
The following is a list of information that may be queried from 
devices enrolled in your MDM: 

Device details 

* Unique Device Identifier (UDID) 

* Device name 

* iOS and build version 

* Model name and number 

* Serial number 

* Capacity and space available 

* 1 MEJ 

* Modem firmware 

Network information 

* ICC1D 

* Bluetooth and Wi-Fi MAC addresses 

■ Current carrier network 

■ SIM carrier network 

* Carrier settings version 

* Phone number 

* Data roaming setting (on/off) 

Applications 

* Applications installed 

* Application ID 

* Application name 

* Application version 

* Application and application data size 

* Provisioning profiles installed with expiration dates 

Compliance and security data 

* Configuration profiles installed 

* Certificates installed 

* List of all restrictions enforced 

* Hardware encryption capability 

■ Data Protection enabled 
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* Passcode present 

Management 

With the management component of MDM, you can 
remove and install settings wirelessly- The management function 
does not T typically, enable the MDM to remove apps or prevent 
app installation, however, you would be able query the device 
for notification that an app has been installed and an end user 
can be notified to remove a specific app, 

Some specific actions dial an MDM server can administer 
include; 

* Remote wipe — sets the device back to factory defaults. 
Once die command is issued, the device immediately starts 
die process, requiring no other user intervention. All data 
and settings are lost. 

* Remote lock — immediately locks die device, requiring the 
user to enter the passcode in order to move on, 

* Clear passcode — if a user forgets their passcode, you can 
send the command to remove their prior passcode and enter 
a new one, enforcing your current passcode policy. 

Configuration and provisioning profiles^ — To 
configure devices and provision in-house apps, MDM servers 
can add and remove configuration profiles and app provisioning 
profiles, as well as their associated data, remotely. 

MDM technologies 

Before exploring how you can use MDM for device 
management, let’s look at the technologies that enable MDM on 
iOS. MDM capabilities are built on existing iOS technologies 
such as managed configuration profiles, over-the-air enrollment, 
and the Apple Push Notification Service CAPNS), You can 
leverage these technologies by using third-party MDM solutions. 

Managed profiles 

Managed profiles are configuration profiles installed on 
devices by the MDM server. This managed profile is analogous 
to GPO and MCX for the desktop and laptop management in an 
organization. These managed profiels can be locked to prevent 
end users from removing them. Once the managed profile has 
been delivered via enrollment, the profile is completely 
managed by the MDM server. 

There’s no limit to the number of managed or unmanaged 
configuration profiles that you can install on a device. 

The MDM server is designed to update and removes 
managed profiles, at the complete control of the IT 
administrator. Because the primary MDM profile must be 
unlocked, end users can opt out and delete this profile at any 
time. 'Hie end user always has these options available; 

■ Opt out of MDM altogether — iOS removes all managed 
profiles and associated data. The trust relationship with the 
MDM server Ls revoked and further push notifications from 
the MDM server will yield no results. 

* Remain under management - the user has complete 
control to remove one or more of the profiles on their device, 
yet still allow some tor all) level of management by the MDM. 
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Over-the-air enrollment 

iOS over-the-air (OTA) enrollment and configuration allows 
you to configure mobile devices securely, without a physical 
connection to a host computer running iPCtl MDM uses Simple 
Certificate Enrollment Protocol (SCEP) to leverage die OTA 
framework for enrollment. 

The protocol is designed to make the issuing and 
revocation of digital certificates as scalable as possible. The idea 
Is dial any standard network user should l>e able to request their 
digital certificate electronically and as simply as possible. 

The process of OTA enrollment involves three parts: 

■ Authentication^ — Thu end users authenticate into the 
MDM server. This process builds our chain of trust, ensuring 
that the requests are coming from authenticated users within 
our network. User authentication can be enforced at die time 
die end user visits the enrollment URLS OTA authentication 
can use any web authentication scheme, on any published 
mechanism 

* Certificate enroll mentB — After the end user is 
authenticated, the device uses the SCEP to generate a 
certificate enrollment request* Tliis request communicates 
directly with the enterprise CA and enables the device to 
receive an identity certificate from the CA in response. 

• Device configuration^ — The third phase of QTA 
enrollment is profile delivery and configuration. This is a 
process that is repeated each time a new configuration 
profile is sent to the device or group of devices. In this part 
of the process, die MDM server sends an encrypted 
configuration profile that’s been bulk for a specific or group 
of devices. The user must agree to install this profile, 
authenticating to the device as necessary* then the MDM 
server takes over and has control to make changes, as 
necessary. 



Figure 12 - Apple's Profile Manager 


Mobile Device Management 
Solutions 

Users have a wide range of choices for MDM providers, 
each having strengths and weaknesses. It is important to ask the 
right questions and assess which of the solutions will fit your 
organization the best. Apple maintains a list of iQS-friendly 
MDM providers and also offers their own solution, built right 
into Lion Server. 

For a list of iOS MDM providers, visit 
http://www.apple.com/iph0ne/bu5ine55/integraH0n/ mdm/ . For 
more information on Apple’s MDM solution, visit 
http://www. apple. conV maeosx/server/. 

Questions to ask MDM providers 

* Do you need to support iOS 3 and iOS 4? Many vendors only 
support the feature set of iOS 4 and above* 

* When will support be available for iOS 3? AU new iPhone 
and iPads will come with iOS 3 pre-installed* 

* Does the product support over the air enrollment? 

* Does the product support remote configuration? 

* What are the hardware requirements for this server? Ideally, 
the MDM host should he on a dedicated system with good 
bandwidth to the Internet. 

* Is the admin interface web-based or does it require a native 
app? 

* Is there any access for non-admins? If so. what features are 
available to standard users? 

* Does the product support other mobile devices? Your 
organization may need support for Symbian, Android, iOS, 
etc* 

* is there a free trial period to test out the vendor’s MDM 
solution? 

* Can they provide references for other similar installations? 

* What are the licensing costs, per device? Are there yearly 
costs? 

* What are the monthly costs if it’s being hosted for me? This 
saves a significant amount on initial investment of hardware, 
software and professional services? 

* How does the device enrollment process work? 

* How quick does technical support respond? How quick do 
updates come out? 

* Is the MDM solution currently shipping and available today? 

* Does the product offer an app portal where end users on 
download apps? 

* Is the product available in all countries? 
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Figure 12 - Profile Manager Web Interface 


In our next article, I will review the MDM solution from 
Apple, called Profile Manager, with stiengths/weaknesses* 
features and options,., stay tuned! f _ , 
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How do VMware Fusion 4 and Parallels Desktop 7 for Mac compare? 


by Neil Ticktin, Editor-in-Chief/Publisher 


J 



Why Virtualization? 

In 2005, Apple announced the switch of the Mac platform 
from PowerPC to Intel processors (the first Intel-based models 
were available in early 2006). This introduced some interesting 
opportunities for the Mac, including the ability to run operating 
systems other than Mac 05 X on a Mac, This includes not only 
your everyday Windows 7 nr XP, but also other Windows OSes, 
including 64-bit versions and a wide variety of Linux and other 
OSes, 

You may already understand your options for running 
Windows on a Mac, but in case you don’t, your first choice is 
to decide between Apple’s Boot Camp, and a virtualization 
product like VMware Fusion or Parallels Desktop for Mac. With 
Apples Boot Camp, you can run Windows natively, but you 
have to reboot every time you want to switch between Mac 05 
and Windows. In addition, you can only use one OS at a time. 
Despite a speed advantage for some tilings, thaLs not 
particularly convenient. For that reason, MacTech recommends 
a virtualization product for most users. 

In addition, virtualization gives “switchers" (those switching 
from Windows to Mac) more comfort because they can use 
their old applications and more easily get to their old data, ft 
gives all Mac users the ability to use some critical piece of 
software not available on the Mac. For example, your job may 
require you to run internet Explorer, the Windows version of 
Outlook, or some other software that your corporate systems 
support. Or, you may simply want to play a Windows game not 
available on the Mac. 

With virtualization, like you'll see in Parallels Desktop for 
Mac or in VMware Fusion, you can am Windows alongside the 
Mac OS, getting die best of both worlds. For many, this may 
mean aimiing Windows in a “window” on your Mac. Both 
VMware Fusion and Parallels Desktop also have the ability to 
run Windows applications even more transparently or full 
screen, but well leave Lhat for another discussion. 


Your final option is to use Parallels Desktop for Mac or 
VMware Fusion to access/use your Boot Camp volume rather 
than a virtual hard disk. This gives you the option of sometimes 
booting Windows natively, and other times, using the volume 
for virtualization. As the performance of doing this has 
improved so much, this has become a real option for users. 

The Big Question 

So which virtualization product do you go with? Which 
solution is faster? Should you run Windows XP or 7? 32-bit or 
64-bit? One virtual processor or more? In short, there are 
different answers for different people; it all depends on your 
needs, More and more, virtualization can accommodate 
whatever your needs might be. 

To tackle this problem, MacTech has once again 
undertaken a huge benchmarking project. We often wait for a 
patch or two after major upgrades to give time for major new' 
versions to shake out. This is similar to the virtualization 
benchmarking projects that MacTech undertook in past. In both 
cases, as with other MacTech benchmarks, we tested 
performance of the types of tilings that everyday users typically 
do. In this case, it w'as not just testing the raw performance of 
the Windows OS, but also commonly used Windows 
applications. Like Iasi time, based on reader feedback, w'e paid 
attention to 3D graphics and gaming. 

The goal was to see how VMware Fusion and Parallels 
Desktop performed, under Window's 7 (XP runs too, but it’s 
time to move on). Furthermore, w r e wanted to see some of the 
differences with differenl Mac models with different graphics 
and processor types. 

To be clear, this article is not a product review; it's a 
benchmarking analysis. The article's purpose is to assess 
performance (including issues we found if something didn’t 
work as expected), and not product features, user interface, 
etc.,. You should use your assessment of features, user 
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interface, and support in conjunction with the below' 
benchmarking results to make your product choice. 

Before you ask w hy other solutions and products were not 
included, let's answer that. This benchmark project is already 
huge with thousands of collected data points crossing two guest 
OSes (Windows 7 and Lion), five models of computers with 
mechanical hard drives and SSDs, and over 5(3 tests each run 3- 
5 times for most of the environments. There were a couple 
thousand tests to be completed, many w f ith a stopwatch. 1hat’s 
all ixfore a single word of ibis article is written! 

To add even one product would increase this huge test 
matrix by 50%. As a result, we focused on the two leading 
commercial virtualization products that come with support. 
These two products also have free trial versions that you can 
compare against other solutions so you can try them for 
yourself and compare them alongside any other solution you 
want at any tune including before you buy. 

One tiring to note, however, is that open source and oilier 
free products may not lie for everyone, especially non-technicaj 
users. For many, these offerings can be difficult to understand 
and install, and they do not have technical or product support 
behind them. Obviously, users can reach out in forums and the 
community, but if you don t understand something, you won’t 
lie able to pick up the phone and call support the way you can 
with a commercial product. If that works for you, great. If not, 
as is the case for most users, then a commercial product is likely 
your solution. 

The Test Bench 

When we were choosing computer models, we chose the 
current model of Macs that give a good representation of what 
most people may have. Certainly, the faster models of these 
computers will perform even better. 

We chose five Mac models to compare alongside each 
other; the "White" MacBook, MacBook Air, MacBook Pro, iMac, 
and Mac Pro, Given the RAM requirements of Windows 7, the 
minimum configuration tested (including on the MacBook) was 
4 GB. 

* 4 GB MacBook, Intel Core 2 Duo processor QWhite 
MacBook”) 

Specifically; MacBook 2.4 GHz 2 GB/250 GB White 
Unibody (Mid-2010) upgraded to 4 GB 

* 4 GB MacBook Air 13-inch, Core i5 processor 
Specifically: 17 GHz Core i5 4 GB/128 GB, Intel HD 
Graphics 3000 

* 4 GB MacBook Pro, Intel i7 processor OUnibody 
MacBook Pro") 

Specifically: MacBook Pro 15.4 in. 2,0 GHz 17 4 GB/500 
GB 5400-rpm 

Intel HD Graphics 3000 and AMD Radeon HD 6490M 
with 256 MB GDDR5 

* 4 GB iMac 27”, Intel i5 processor 

Specifically: iMac 27 in. 2.7 GHz Intel Core i5 4 GB/1 
TB 7200-rpm 

AMD Radeon HD 6770M with 512 MB 

M/C1ECM 


* 6 GB Mac Pro, Quad-Core Intel Xeon processors 
Specifically: 6 GB/1 TB 7200-rpm / ATI Radeon HD 
5770 with 1 GB GDDR5 

Two 2.4 GHz Quad-Core Intel Xeon “Westmere" 
processors 

Memory for virtual machines can be configured with a 
wide array of settings. As a general rule, both VMware Fusion’s 
and Parallels Desktop’s default memory for each configuration 
(of physical RAM and "guest” OS) were the same. Windows 7 
virtual machines ran with 1 GB of virtual machine RAM. Lion 
ran with 2 GB of virtual machine RAM. 

Similarly, for disk allocation we set up all of die virtual 
machines the same way. We used 40 GB expanding disks in a 
single hie (e g., not 2 GB chunks), but the disks were pre¬ 
expanded so that expanding actions wouldn’t affect results. The 
disk location of die virtual hard drive was in a similar physical 
location between computers, as that can make a significant 
difference in disk performance. 

The tests compared VMware Fusion 4.0.2 with Parallels 
Desktop for Mac 7.0,14924.699487, running Mac OS X 107.1 
with all updates as of the end of September. All 
Windows updates as of the end of September were installed for 
Windows 1. 

Test Types 

There are a variety of often referred to, and utilized 
benchmarking suites in the computer industry including SPEC 
tests, FCMsrk, WorldBench, Performance Test, Unixbench and 
others. Each of these tests uses a series of tests that measure in 
a consistent way to assess specific types of performances. The 
key to each of these tests is appropriateness, repeatability, and 
accuracy. 

We are sometimes asked how we select the tests we have 
in benchmarks. The goal is to represent the types of actions 
that virtualization users are doing on a regular basis. In 
particular, we focus more on user tasks rather than installation 
or configuration (because they are typically only done once or 
infrequently). 

In the PC market, PC World (magazine) uses WorldBench 
as their benchmarking tool of choice. If you don’t know ahout 
WorldBench, you can see more at http.//www.worldbench.com. 
WorldBench 6 uses a combination of applications bundled 
together to determine benchmarks. This includes applications 
like Adobe Photoshop CS2, Autodesk 3ds, Mozilla Firefox 2, 
Microsoft Office 2003 and others. This may be a very good way 
for PC World to approach tilings as it allows older machines to 
be part of the mix, and it can avoid possible compatibility issues 
with the newer and current versions of software, but obviously 
it's not reflecting the latest versions of software. It also doesn’t 
reflect the virtualization pan of the experience. 

There are a variety of other benchmarks available, and 
w'e’ve looked at many of them as possible tools to include in 
our mix. Often, we find their measurements simply don’t reflect 
a true user experience. Other times, they don’t reflect how a 
virtualization user may be using Windows, or even they simply 
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report erroneous results. For example, in previous attempts to 
use PassMark, we found their graphics scores were not at all 
representative of real life graphics performance in games or 
other graphic uses. Those tests showed items as faster when, 
In fact, they were much slower Benchmarks are only useful if 
they reflect the real world. 

Rather than use World Bench or others, we focus on the 
types of measurements we believe best represent the 
experience we see (in terms of speed). And while it takes 
practice and some skill, we test virtualization operations with a 
stopwatch — as the closest representation of how T a real user 
would see it. CPU crunching ability, for example, is measured 
through tests like zip’ing files directly in Windows. And for 
Office users, we use the most up to date version of Microsoft 
Office for Windows (2010), again with all updates thru the end 
of September. 

There are two exceptions to this: graphics/gaining and 
CPU utilization. In these two cases, we found that testing 


utilities not only work well but are necessary to give the most 
repeatable and concrete results. This time, we had the 
opportunity to use a tool that measures frames per second to 
verify the numbers reported by 3DMark06 (the industry 
standard for tuning gaming systems), 

Remember, benchmarks are not a review — they are 
benchmarks. They are meant to just tell you which runs faster. 
If you are interested in a specific feature, support, the user 
interface, or any of the other criteria for deciding on a product, 
that's a different article. 

Overview 

We won't keep you in suspense. When we look at die "big 
picture" of all the top-level lest results, Parallels is the clear 
winner. If you count up the general tests (including the top 3D 
graphics scores), Parallels won 60% of the tests by 10% or more. 
And, if you include all the tests where Parallels was at least 5% 


Test Tally - Who won the most tests: 
VMware Fusion 4 or Parallels Desktop 7? 



Tie (Both are about the same speed) 
VF4 10%+ Faster 

* VF4 Double or more the Speed 
PD7 10%+ Faster 

* PD7 Double or more the Speed 


VF4 5%+ Faster 
VF4 25%+ Faster 
PD7 5%+ Faster 
PD7 25%+ Faster 


Test Tally: General Virtualization Tests 
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3DMark06 (Graphics) High Level Scores 




3DMark Score 

Normalized Results 
(TALLER is better) 


MADS** 




SM2.0 Score 


HDR/SM3.0 Score 



CPU Score 


Fusion, Win7 U Parallels, Win7 


Test Tally: 3D Graphics Tests 


faster, as well as the balance of the JDMarkOti graphics tests, 
Parallels increased the lead further. In other words, Parallels 
Desktop 7 beat VMware Fusion 4,0.2 in 74,9% of the general 
tests we ran, and Parallels was double the speed or more in 
almost a quarter of the top-level tests, 

If you focus exclusively on 3D graphics, as measured by 
3DMark06 version 1,2, Parallels won by an even larger margin. 
Specifically, Parallels won 71% of the tests by 10% or more, and 
was also a bit faster on an additional 8% more of the tests, and 
tied on the rest. In other words, Parallels Desktop 7 beat or tied 
VMware Fusion 4,0.2 in all of the 3D graphics tests we ran, 

3DMark06 has three main aggregate scores. The most 
important of which is the lL 3DMark Score," In addition, SM2.0 
Score measures 3D Shader Model 2.0 performance, and the 
HDK/SM3.0 Score measures the 3D Shader Model 3 0 & HDft 
performance. 

There are a handful of places where VMware Fusion 
consistently was faster than Parallels Desktop. For example, 
doing a full Shut Down of Windows 7 was faster in VMware 
Fusion. And. there were a couple of test configurations for File 
I/O tests and application launches that VMware was definitely 


faster, but Parallels was 
also faster in other 
instances of similar tests. 

Overall, of the top- 
level tests, VMware 
Fusion won 7.8% of the 
tests by at least 10%. For 
the 3D tests, VMware 
Fusion never beat 
Parallels, buL tied about 
20% of the time. There’s 
no doubt that VMware 
Fusion 4 is significantly 
better in graphics than 
version 3-1, hut it still 
has not caught up to 
Parallels Desktop, 

Parallels Desktop 
has new power 
management features 
that stretch your battery 
life. On the MacBook 
Pro, we saw about 25% 
more battery time on an 
idling virtual machine 
(which results in 81 
additional minutes of 
use) than we did on 
VMware Fusion in the 
same test. 

One of the best 
ways to visualize the 
huge amount of data 
points is through MacTedfs 
well-known “Colored Cell Worksheet Overview" In these 
worksheets, a cell represents the best result for each test for 
each version of Windows for each virtualization product. These 
are then colored according to which product was faster. 

Green cell coloring means Parallels Desktop was faster 
than VMware Fusion, A blue cell coloring indicates VMware 
Fusion was faster than Parallels Desktop. Scores that were 
within 5% of one another are considered a tie. Coloring 
darkness has four thresholds: >5%, >10%, >25% and double the 
speed or more, (Note: Not all tests were run on all 
configurations, hence the empty cells.) 

Obviously, when you look at the amount of green on the 
worksheet, you can see that Parallels was faster in the vast 
majority of tests that we ran. 

The Test Suite and Results 

In the sections below, well walk you through what we 
tested, and the results for each. These tests are designed to arm 
you with the information so you can make the best decision for 
your type of use. 
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Virtualization 2011 Benchmarks 

serfoi-med by Hablte-h Magazine 
=911 2011 

fe 2DIl r MaeTeLTi Magazine 

VI times In secs unless otherwise noted 


Test Description 


Performance: 


Launch VM with full Guest OS Boot {NotePad) 

L 

59.39 

3&46 

Susper.d VM 

L 

9.76 

TUl 

Launch VM with rasume from suspend {Adam) 

Launch VM wrtr roauma from suspend (Successive) 

L 

L 

3247 2942 

9.93: :; f : t) 11 

Shut Down of Windows 7 

L 

n.02 

i3,94 

limpness 1GB Fite 

L 

w 

91.24 J 

r 1 

r S.C77 r 


File and Network IO 

rise duplicate - Within imysJ virtual kart) drwe 
FHe copy - t° focal Mac heto drive from virtual drive 
Pile copy - from loce- Mac hard drive to virtual drive 
File copy - to LAM Win7 St j r& Server over Ethernet 
File copy - from LAN Wrn7 SMB Server over Ethernet 

Footprint on Mac 

CPU use tor sitting idle {in %) 

Fxhsust Bettery; JE Idle [only MB?; in mm) 

Internet Explorer: 

Microsoft IE - FisKOow! with 750 ftsti 

“tlcnosoft IE - Flshtwwl with 10 fish 

'flcrowft IE - P#mt Bell tps»nt delis per minute) 

Kkcrosoft IE - Psychedelic 

'titrosoft IE - HTHLS Sudoku {in secondsJ 

Hieroeoft Word: 

Successive Launch 

Micro soft Outlook: 

Successive Launch 

iDMerkOe Testa 

3DMsrl( Scene 
5M2.Q Score 
HBtySHlO Score 
:PD Score 
Same Score 

£Tl ■ fteturn To Proxyeon (FPS) 

372 - Firefly Forest [FPS) 

IPU1 - Red Valley (FP5) 
rPU2 - Red Valley (FPS) 

*QRl - Canyon Flight (FPS) 

fDR2 - Deep Freeze (FPS) 

r iN Rate - Single-Texturing (Mlexels/s) 

HN Rote - Multi-Ttexturing [Mtexelis/s) 

Pixel Shader fFRSJ 

Vertex Shader - sample (Mwftkw/d) 

Vertex Shader - Complex (Mvertlces/t) 

Sbader Particles {5N3-0) 

Fdrtfn Noise [5M3.Q) 
s Triangles {Mtbangiev's) 

32 Tnangies (Mtriangles/i) 

12H Triangles (Mtriongles/s) 

512 Tnangles (Mtnsngle^s) 

2D40 TnaUgles (Mtnanglesrs) 

327SS Tnangtos (Mtnangtes/sj 



Colored Cell Worksheet Overview; Virtual Hard Drive 


For each set of results, you can see the analysis For each 
model of computer running Windows 7, If you want to see 
more detail on the tests or on an individual Mac model, you 
may want to review Lhe spreadsheet for those details, 

As you look through the charts below, pay attention to 
whether the better result is represented by taller or shorter bars 
(see the lower left corner of each chart). 

For the launch tests (launching the VM, Booting Windows, 
and Suspend/Resume), we had the option of an “Adam” test 
and a “Successive” test. Adam tests are when the computer has 
been completely restarted (hence avoiding both host and guest 
OS caching), Successive tests are repeated tests without 
restarting the machine in between tests, and can benefit from 


caching. Both can mimic real use situations depending on a 
user's work habits. 

The tests used were selected specifically to give a real- 
world view of what VMware Fusion and Parallels Desktop are 
like for many users. We didn't focus on the tests which were so 
short in time frame (e.g. f fast) that we could not create 
statistically significant results, or that had unperceivable 
differences* 

For some of die analysis, we “normalized” results by 
dividing the result by the fastest result lor that test across all the 
machine configurations. We did this specifically so that we 
could make comparisons across different groups, and to be able 
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Virtual Machine Performance 


Launch VM w/Full 
Windows Boot 


Suspend VM 


Resume VM (Initial) 


Resume VM (Successive) 


Windows Shut Down 


Compress 1GB File 



Normalized Results 
(SHORTER is better) 

Fusion, Win? □ Parallels, Win? 


Virtual Machine Performance 


to give you overview results combining a series of types of 
tests, and computer models. 

Instead of a plain “average” or “mean”, overall conclusions 
are done using a “geomean*, w T hich is a specific type of average 
that focuses on the central results and minimizes outliers, 
Geomean is the same averaging methodology used by SPEC 
tests, PCMark. Unixbench, and others, and it helps prevent 
against minor result skewing, (If you are interested in how it 
differs from a mean, instead of adding the set of numbers and 
then dividing the sum by the count of numbers in the set, n, the 
numbers are multiplied and then the nth root of the resulting 
product is taken). 

For those interested in the benchmarking methodologies, 
see the more detailed testing information in Appendix A, For 
the detailed results of the tests used for the analysis, see 
Appendix B. Both appendices are available on the MacTech 
web site. 


Launch and CPU Tests 

There are Lhree situations in which users commonly launch 
a virtual machine: 

Launch the virtual machine from “off" mode, including a full 
Windows boot and ending with launching of an application. 
For testing purposes, we chose the NotePad application. 
Launch the virtual machine from a suspended state, and resume 
from suspend (Adam), 

Launch the virtual machine from a suspended state* and resume 
from suspend (Successive), 

For the first test, we started at the Finder and launched the 
virtualization applications, which were set up to immediately 
launch the virtual machine. The visual feedback is fairly 
different between Parallels Desktop and VMware Fusion when 
Windows first starts up. Windows actually does its startup for 
quite some time after reaching the desktop. In some cases, it 
can take quite some time for Windows to complete its boot 
process. Most users don't care if things continue so long as they 
aren’t held up. 
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Application Launch (Successive) 



0 X 2 3 4 S 

Time in Seconds 

(SHORTER is better) Fusion, Win? □ Parallels, Win? 


Windows Application Launch Performance 


As a result, we focused on timing to the point of actually 
accomplishing something. In this case, we configured NotcPad 
to automatically launch. The test ended when the window 
started to render. This gave us a real world scenario of being 
able to actually do something as opposed to Windows just 
looking like it was booted. 

The primary difference between the two types of VM 
launch test is that the computer is fully rebooted (both the 
virtual machine as well as Mac OS X) in between the '‘Adam'' 
tests. The successive tests are launching the virtual machines 
and restoring them without restarting the Mac in between. 

Successive tests benefit from both Mac OS X and possibly 
virtual machine caching and are significantly faster. However, 
you may only see these types of situations if you are constantly 
switching in and out of your virtual machine. 

As with all of our tests, we performed these tests multiple 
times to handle the variability that can occur. Of those results, 
we took tile best results for each product. 

Clearly, virtual machines with more vm memory take 
longer to restore, so "more' 1 is not necessarily fetter here. Use 
the smallest amount that does what you need to do well. In our 
case, we focused on 1 GB virtual machines in Windows 7, 
Most benchmarking suites measure CPU performance 
using file compression as aL least one part of their analysis. We 
did the same. As a matter of interest, we used compression 
instead of decompression, because with today's fast computers, 
decompression is actually much closer to a file copy than it is 
to CPU work. Compression requires the system to perform 
analysis to do the compression, and is therefore a better 
measurement of CPU. 


The two solutions are very dose to one of another with 
Parallels having the slightest edge in speed in compression, but 
nothing substantial. 

Application Launch Test 

Here, we tested two of the most common applications used 
in virtualized desktop environments: Microsoft Office 2010 f s 
Word and Outlook. Users often go in and out of Word and 
Outlook, so we focused on successive launches. Similar to the 
OS launch tests, a successive launch test is done repeatedly 
without restarting Windows. 

Most applications, including these, launch very quickly 
with Parallels having a slight edge Even so, launches are so fast 
on both virtualization products that even the worst case was 
very usable. 

In all cases, launch times were quite fast from a user 
experience. Its nice to see that aH the Microsoft Office 
applications launch (typically) in a few seconds under both 
Parallels Desktop and VMware Fusion. Often, it felt nearly 
instantaneous to a user on the successive launches. 

Application Performance Tests 

In many cases, applications today perform so well and so 
fast, even under virtualized environments, that anyone would 
be pleased for small documents and activities. We focused our 
efforts on one of the more demanding and used applications: 
Internet Explorer 9. 

Microsoft has a series of public benchmarks for seeing how 
well a browser performs. 
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Internet Explorer 9 Performance 


MACVECK 



Fishbowl (750 fish) Fishbowl (10 fish) 


Normalized Results 
(TALLER is better) 


Paint Ball 


Psychedelic 


Fusion, Win? □ Parallels, Win? 



HTML5 Sudoku 


Internet Explorer Performance 


See hUp://Ee. microsoft.com/tesldrive/Views/SEIeMop/ for all 
kinds of demos and perfonmnee tests. We chose a set of tests 
that took enough resources to measure well and had a 
consistent method of measurement. 

Across the board, Internet Explorer 9 performed 
significantly better on Parallels Desktop than it did on VMware 
Fusion. Only the Sudoku test was dose at all. All the rest were 
a virtual blowout (sorry, couldn't resist). 

Interestingly, VMware Fusion often performed very 
consistently from one model of Mac to another despite some 
models being much faster machines. That said, some tests did 
not perform well enough to move to the next phase of the test. 
The best example was the Psychedelic test which gave die 
following two messages. 

We apologize that you weren t able to experience Psychedelic Not 
all web browsers are capable of achieving the speeds required for 
a truly Psychedelic experience on the internet If you're growing 
tired of slow web browsers, the wait is almost over,,. 

VMware Fusion had issues with the Psychedelic test 


Because the web is 
becoming more and more 
an application platform, we 
chose to focus on more 
advanced Web 2.0 
technologies rather than 
simple htral 

Footprint Tests 

One of the most 
interesting things in the 
virtualization market is 
how little overhead 
virtualization takes today 
compared to what it used 
to, To assess this, we 
measured in a variety of 
ways. Specifically, we 
focused on CPU usage 
(overall for the Mac), 
which has an impact not 
only on usability but also, 
on laptops, how long the 
battery would last. CPU 
usage was measured using 
“top* (a command line tool 
that’s part of UNIX with a 
minimum of 50 continuous 
samples averaged for the 
result). For all tests, we 
removed the high and low 
use outliers to give a more 

typical impact. 

While Parallels did use substantially less CPU when you 
look at percentages, in reality, they both took so little of the 
CPU (except for VMware Fusion on a MacBook), that you can 
really let these apps sit idly and not worry about it bogging 
down your machine. 

Battery Tests 

With Apple making it impossible to swap your batteries in 
the latest laptops, battery life is more important than ever. 
VMware Fusion relies primarily on the Mac OS and Windows 
settings to manage battery life. Parallels, however, has some 
special features to help you stretch battery life. 


Congratulations! You’re running a fast browser on modem hardware 
and have earned the opportunity to try Hallucinogenic Mode. Please 
do not attempt this mode unless you have experience using a modern 
browser, as this may cause a sudden, unsafe drop En blood pressure. 

Parallels Desktop ran the Psychedelic test well 
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File and Network IO Performance 
Copy Four 1GB Files 


File dup - within local 
virtual hard drive 


File copy - to local Mac 
hard drive from virtual 
drive 


File copy - from local Mac 
hard drive to virtual drive 


File copy - to LAN Win? 
SMB Server over Ethernet 


File copy - from LAN Win? 
5M0 Server over Ethernet 



0 20 40 60 &Q 100 120 140 160 


Time in Seconds 
(SHORTER is better) 

Fusion, Win7 □Parallels, Win? 


Virtual Machine File I/O Performance 


The result is noticeable, In our tests, Parallels got 25% 
more battery life on a virtual machine sitting idle than VMware 
Fusion. Tills was 81 more minutes of battery life on the 
MacBook Pro. If you are using your virtual machine for typing 
in Word, or using Excel, this Is a reasonable approximation. 
That said, if you are “pegging" the CPU on your machine, or 
using an optical drive or hard drive, the difference will be less. 
For most travelers, the light CPI 1 impact of Word/Excel use is 
probably what they are using a virtual machine for. 

File and Network 10 Tests 

One of the common problems with File and Network IO 
Tests is caching. In fact, it's common for benchmarkers to think 
they are avoiding caching when in fact, they aren’L In the case 
of File and Network fO tests, there are two types of caching: in 
the hast OS and in the guest OS. Furthermore, sometimes the 
caching can appear to happen even after restarts of both the 
host and guest OS, 


In our tests, we used a set of four different 1 GB files with 
random data to give the most representative results and avoided 
caching. More specifically: 

I GB file with randomized data. To generate the file of exactly 
1 GB. we used the command dd if=/dev/random from 
the command line. 

The idea behind the “document set” is to move enough 
data that we can see both real throughput and avoid caching at 
all levels. 

We were a bit surprised to see the results given the past 
performance of these two products, and what both companies 
had told us about the areas they focused on. After digging 
around some we found a surprise. 

Surprise! You have MSSE 

If you have Office 2010 installed, and Windows Update 
configured to do updates, you ’ll notice Microsoft Security 
Essentials is now part of the Optional Updates, This is 
important to take note of as it will have an impact on basically 
anything that touches the disk (boot times, compress, network 
copies to disk, and more). In fact, in the current versions of 
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MSSE now part of the optional installations 


PD7 f ii eliminates some of the speed margin weVe seen in the 
past when compared to VF4, VF4 did not seem to he impacted, 
or at least as much. 

So, if you are a Lrue speed demon, you may want to 
remove Microsoft Security Essentials. Since all of our tests were 
done with all updates applied, including the installation of 
Microsoft Security Essentials, your speed may he even faster on 
Parallels. 

Of course, if you are worried about security, then keeping 
MSSE installed Ls the way to go and I would guess dial Parallels 
will likely address die lost speed in the future anyway. 

3D Graphics Tests 

We re always on the lookout for new ways to measure 
graphics in particular And this lime, again, we did look at some 
of the results of other benchmark suites, and found that their 
assessment of graphics were very clearly wTong (we could 
clearly see visually they weren’t right). 

As a result, we again used 3DMarkG6 (version 1.2) by 
FutureMark. 3DMark06 is a globally recognized and comparable 
measurement of 3D performance. Gamers use 3DMark to test 
their machines and tweak them for performance. See 
http://wwwiuturemork.com/ for more information about 
3DMark06. 


Clearly, if you are going to play games and be serious 
about it, then running in Boot Camp is your best choice running 
Windows natively. However, Parallels Desktop is fairly dose 
and with a virtualization solution you don’t have to reboot, deal 
with driver issues, and more. We were pleased to see that 
VMware Fusion 4.0.2 no longer has the rendering problems that 
it did in prior versions. 

Without a doubt. Parallels Desktops greatest advantage 
over VMware Fusion is in 3D graphics. Not only is the speed 
difference huge (Parallels Desktop is often double or more the 
speed of VMware Fusion), but everything just seems to run 
more smoothly. 

Based on past experiences, we expected things to run well 
on the Mac Pro and Mac Book Pro. We were very pleased to see 
how well ail the Mac models run graphics and games—a 
noticeable difference from just a couple of years ago. 

Obviously, the results for 3DMark06 vary greatly by the 
hardware they are on because of the graphics capabilities of 
each machine. As such, the best way to look at these is in the 
detailed spreadsheet where you can see results lor each model 
for each OS* 

Overall, these result charts will give you an idea of some 
of the things that VMware Fusion did well in. The 
overwhelming winner in this graphics competition is Parallels 
Desktop. 
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Fusion, Wln7 □ Parallels, Win7 

HDR, CPU and GT Tests 3DMark06 Suite 


Additional Findings 

There are additional tidbits that we 
learned through the incredibly complex 
process of testing virtualization products. 
Here are some additional insights. 

64-bit and Virtual Processors 

We chose 64-bit because it has become 
the standard on Windows to give users the 
additional addressability they would like. In 
our experimentations, however, we found 
the 64-bit default Windows 7 installation was 
about 2.5 GB larger than the 32-bit in hard 
disk space. Not a huge deal, but something 
to note. 

These days, the decision is fairly simple. 
If you have an application that can make use 
of multiple virtual processors, and this 
includes 3D Graphics, and your Mac has 
enough horsepower, then you should use 
them. Otherwise, it’s not necessary. 

Then again, if speed is that important to 
you. you should ask yourself whether to run 
the app natively on your Mac instead of in a 
virtual machine. But sometimes, like with 
some industry-specific software, you may 
not have an option. 


Running Lion in 
Virtualization 

Apple has finally changed their 
license with Mac OS X Lion so that users 
can run a virtual machine with Lion as the 
client OS, As a result, both Parallels 
Desktop and VMware Fusion tout that 
ihey can run Lion in a virtual machine. Of 
course, it was a moral imperative for us to 
check this out and see how it runs. 

In short, they run pretty well. 
Parallels booted Lion a bit faster, but we 
also wanted to see about virtual machine 
speed. Without doing comprehensive 
benchmarks, we took a quick run of 
Geekbench. in short, they ran 
comparably to each other. Clearly, 
neither company has optimized yet for 
Lion and I expect well see improvements 
on this front. 

What would you use this for? One of 
the greatest uses may be for developers 
testing different builds of Lion and their 
product, and wanting to do so in a protected way. Beyond 
that, well, it's a bit of a strange experience to say the least. 


58 NOVEMBER ■ 2011 


WWW.MACTECH.COM 









































0 IDATA RESCUE 3 



Do-il-Vnursell 
Ohio Recovery Sollware 


From the makers of... 

Data Rescue 3 


The best sellin g data recovery software for Mac... 


pftoso^ 


incdMptM^ws 




...comes the 

complete data recovery service, 



The Data Rescue Center was founded by Prosoft 
Engineering, makers of the award-winning Data 
Rescue software. Our recovery know-how provides 
unparalleled advantages over other recovery 
services. 


FREE hardware diagnosis 

FREE specialized drive 8c laptop 
boxes sent direct to you at NO COST 

No Data, No Charge 
Professional Results at a Lower Cost 

Numerous awards in 2010 for Best 
Computer Recovery Service 

Class 100/ISO 5 Cleanroom 

Class 2 Vault 

FREE E-Waste Recycling 


The Data Rescue Center is headquartered in 
Livermore, California at a new state-of-the-art 
facility near Lawrence Livermore National 
Laboratory. 


This new facility provides our recovery engineers 
with the top technology to recover your computer 
data while offering best-in-class security features 
to protect your data from being compromised. 



tlw hrt ui Silicon Vittfy 201D 

metroactive 

flwl Hatd Diik ««ow;y 



1599 Greenville Rd Livermore CA 94550 

877 - 501-4949 


TheDataRescueCenter. com 














VMware Fusion 4.0.2 Running OS X Lion 

VCPUs and CPUs 

The number of VCPUs can make all the difference in the 
world on the GeekRench performance results for the VMs. 
Most VMs are likely 1 VCPU, and to compare, we turned the 
Mac to use just one CPU. What we found is that a virtual 
machine with 1 VCPU actually performs better than the Mac- 
does on its own with 1 CPU. Why? We believe it has to do 
with the host OS services behaving differently with \ CPU 
including issues related to double CPU scheduling, 
background services, etc. The 1 VCPU is spread over 
multiple cores of the host OS's processor. 

What we did find is that while there is a difference 
between the 1 VCPU virtual machine compared to a Mac 
using a full i7 processor, the difference is quite reasonable. 
This is one place that we recommend looking at multiple 
VCPUs if you are going to do this on a regular basis. 

Conclusion 

Both VMware Fusion and Parallels Desktop for Mac are 
excellent products, and both allow you to run many OSes 
quite well (including Lion now), in the end, when you 
decide which product to use, you should take into account 
what’s most important to you. 

Windows 7 is such a pleasurable experience that unless 
there's some driving reason otherwise, you should use it 
rather than XP under either virtualization product. 

When it comes to whether you should use multiple 
processors or 64-bit virtual machines, it depends on your 
use. If you have a real need for either, and can articulate a 
reason for it, than use them. They do work well. That said, 
if you don't have a specific need, then don’t bother with 
multiple virtual CPUs. As for 64-bit, you should use it 
(especially in Windows 7) unless you have a driving reason 
not to. 

Many people have the feeling of “more is better," but 
when it conies to RAM in the virtual machine, that is not 
necessarily the case. More RAM means longer virtual 
machine launch times, suspends and resumes. For most 
users, 1 GB of virtual machine RAM will work best for 



Parallels Desktop 7 Running Mac OS X Lion 

Windows 7. Use more than that only if you really know you 
need it. Gaming may do best with 1.25-1.5 GB of RAM if 
you can spare it. 

In the vast majority of overall our tests, Parallels 
Desktop 7 won. Again, if you count up the general tests 
(including the top 3D graphics scores), Parallels won 60% of 
the tests by 10% or more. And, if you include all the tests 
where Parallels was at least 5% faster, as well as the balance 
of the 3DMark06 graphics tests, Parallels increased the lead 
further. In other words, Parallels Desktop 7 beat VMware 
Fusion 4.0.2 in 74.9% of the general tests we ran, and 
Parallels was double the speed or more in almost a quarter 
of the top-level tests. 

If you focus exclusively on 3D graphics, as measured by 
3DMark06 version 1.2, Parallels won by an even larger 
margin. Specifically, Parallels won 71% of the tests by 10% 
or more, and was also a bit faster on an additional 8% more 
of the tests, and tied on the rest. In other words, Parallels 
Desktop 7 beat or tied VMware Fusion 4,0.2 in all of the 3D 
graphics tests we ran. 

If you are a traveler, Parallels Desktop has new power 
management features that stretch your battery life. On the 
MacBook Pro, we saw about 25% more battery rime on an 
idling virtual machine (81 additional minutes of use) than 
we did on VMware Fusion in the same test. 

To be dear, this article is not a product review; it’s a 
benchmarking analysis. You should use it as part of your 
decision combined with other factors, such as product 
features, user interface, which OS you want to run, graphics 
capabilities and support to make your product choice. 

One thing is clear- virtualization for the Mac works well. 
Really well. And 1 expect that well see virtualization 
products keep getting better and better. 
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Appendix A: 

Benchmarking Methodology 

Introduction 

The purpose of this appendix is to outline the basic 
parameters for how MacTech Magazine performed 
benchmarking tests on VMware Fusion, and Parallels 
Desktop for the purpose of evaluating the performance of 
virtual machines running Windows 7. 

Consistency 

Since the tests involve both multiple machines and 
multiple pieces of software, the focus was on creating as 
much consistency across the tests as possible, MacTech 
accomplished this in several ways. 

First, each set of tests was performed by a single 
MacTech staff member to eliminate any of the natural 
inconsistencies that often occur across individuals. 

All of the tests were performed on the same version of 
the Mac operating system across the different hardware. At 
the time of the tests, this w r as OS X 10.7.1 and included the 
most up-to-date versions of Apple patches as prescribed 
through “Software Update" in OS X. 

All of the tests were done on “virgin" systems, i,e. p 
freshly wiped hard disks, with fresh Mac OS X, virtualization 
application, Windows and Microsoft Office installations, 
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with no third party software installed beyond the standard 
Mac OS X. Only one virtualization application was installed 
to avoid any possible interactions. Furthermore, care w r as 
taken to make sure the virtual hard drives were located in a 
similar position on the hard drive. 

All of the tests were performed with the most up to date 
set of patches for Microsoft Windows and Office as 
prescribed by Microsoft’s automatic updates, including 
service packs, optional and recommended updates. 

Avoiding Interactions 

While the tests covered a variety of applications, all 
tests (where appropriate) were performed with only that 
single application open, In other words, to the extent 
possible, no other applications will be running. (Obviously 
excluding background and OS tasks that are part of a 
standard install of either OSes or Microsoft Office,) 

To avoid issues with a noisy network, the test machines 
were installed on what was considered a “quiet" network 
with minimal traffic. MacTech monitored the use of the 
network to make sure that the machine does have network 
access, but is not impacted by the network. 

Measurements, Testing and Outliers 

For timed tests with results under 60 seconds, tests were 
measured to within 1/IOOth of a second. For those over 60 
seconds, tests were measured to within a second. 

Most tests were performed at least three times per lest 
and per machine configuration, and often 5+ times 
depending on Lhe test. Outliers indicating a testing anomaly 
were retested as appropriate. 

In most cases, the tester used successive tests, not 
“Adam" or “first" tests to better emulate typical daily use, 

Those tests that could be impacted by the size of the 
window were tested with the same window size, and screen 
resolution under all scenarios. 

Some tests w'ere eliminated because the machines 
simply performed too last to get an accurate measurement. 
For example, sending or sorting emails always performed 
faster on the machine than lhe tester could measure. 

Appendix B: Testing Results 

In keeping the results fully open, MacTech is making 
the test data available in the form of an Excel spreadsheet. 
Simply drop us an email and well be happy to provide it to 
you. 
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Find Your Current iPhone Location 

Four ways to find your location with your iPhone 

^by Mihalis Tsoukalos 


Introduction 

This article is an introduction to Core Location, an iOS 
framework that helps you find your location using either your 
Mac or iOS device. The Core Location framework lets you talk to 
Location Services. Not every 7 iOS device has the hardware to 
support lxx:ation Services, This article also talks a little about 
HTML5 Geolocation, 

iOS devices find their location using one of the following 
three ways; Wi-Fi, Cell Tower Triangulation or GPS. The 
programmer cannot choose the preferred way, she can only 
choose the desired accuracy but iOS will finally decide what to 
use—this is not always a bad thing liecause r for example, GPS 
functionality may not be available for some reason. The thing to 
keep in mind is that the offered location accuracy may be not the 
desired one. 

You might also ask: if l cannot choose a way. what can 1 do? 
You can choose the accuracy of the result but you still have no 
guarantee that the result will be as accurate as you want. Also, 
remember that more accurate results take more time and battery 
power. 

Wi-Fi 

This is the least accurate method and works as follows: it 
uses the IP address of your iOS device and tries to match it using 
a large database of known service providers 1 IPs around the 
w 7 odd and the place they are. 


Cell Tower Triangulation 

Tliis method uses cell towers to tell the location. It can he 
pretty accurate, especially at places w r here there are many cell 
towers around. This method calculates the current legation based 
on the locations of the cell towers around your iOS device, 

GPS 

This is the most accurate method of all. It uses the GPS 
hardware of your iOS device to find its location. A GPS reads 
signals from multiple satellites in order to tell the location. 

HTML5 Geolocation 

hirst of all, let me clarify something: the W3C Geolocation 
API is not part of the HTML5 specification although most people 
are using the term HTML5 Geolocation. Also, it has nothing to do 
with iOS, The Gcolocation API is a specification lor finding you 
location using scripts, It looks promising but 1 still prefer the 
native iOS APIs. 

A simple iPhone application 

In this part of the article, a simple iOS application will be 
created. Xcode 4,0.2 running on Mac OS X 10.6.8 is used. The 
screenshots are from an iPhone -i running iOS 4.3.4. 

In order for die application to compile, you need to add the 
Core Location framework to your Xcode 4 project. Note that 
the procedure is slightly different if you are using Xcode 3. 



Figure 1: The Link Binary With Libraries data 
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First you should go in the first line of the Project Navigator, 
choose it and then choose the target (FindMe) in the “Targets" 
part. The choose “Build Phases” and open the “Link Binary With 
Libraries” pan. See figure 1 for more help. 

Next, you should press the + button on the left and you will 
see figure 2 where you can select the frameworks and libraries 
that you want to add to your target. 



Figure 2: Adding the Core Location framework to your Xcode project 


You should do the same steps to die presented IOS 
application as well as any odier application that uses Core 
Location, 

Create a new View-based application and call it FindMe and 
add the Core Location framework to your application, Now go to 
the FindMeViewContmller.xih file and make it look like figure 3 
by adding three “Round Red Buttons 7 ' and 6 “Labels” from die 
Object Library. The left column of the Labels w ill not change, The 
right column will change according to the different location data. 
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Figure 3: Find Me ViewCo ntro I lerxib 
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It is now time to look at some Qbjective-C code! The 
FindMe Xcode project can be downloaded from the MacTech 
source code ftp site at ftp://ftp-modech.com. 

The FindMeViewController.h file, included in the Xcode 
project, has three functions called accuracy Best, 
accuracy! 00m and accuracySkm . The appropriate 
connections of both the IBOutlei and IB Action variables 
declared in FindMeViewController.h were made using 
Interface Builder. 

If you want to make the connections yourself -by 
creating another Xcode project using my Qbjective-C code- 
select the "Round Rect Button” called “Accuracy Best” and 
press and hold down the control key. Press the mouse button 
and drag it to the “File's Owner” cube icon and stop pressing 
the mouse button. Select “accuracyBest” from, the presented 
list. Do the same with the other two “Round Rect Button” by 
selecting “accuracy 10m" and “accuracy3ktn” respectively. You 
should now connect Lhe three UILabels named “Label” with 
the appropriate IBOutlets. Select the “File’s Owner” icon, 
press and hold the control key and drag the mouse to the 
first label. Stop pressing the mouse button and select the 
"latirudeLabel” Outlet, Do the same with the other two labels. 
Figure 4 shows the connection of the “File's Owner” with the 
“accuracyLabel” Outlet. 
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Figure 4: Connecting "File's Owner''with the accuracyUbel Outlet 

The delegate of the Location Manager must conform to the 
CLLocationMamgerDelegate protocol and that can be shown 
inside the Ft ndMe ViewCo nt roller, b file at lhe 
FindMeViewControtter class declaration. This means this 
functionality should be implemented inside the 
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Fit ulMe ViewCo nt roller, m file. The missing code was added at the 
end of the file before the @end keyword and after die following 
two lines (that were also added): 

//pragma mark ■ 

//pragma mark CUjOCationManagerDelegate Methods 


We should now' talk a little about the Objective-C code, 
which is pretty straightforward. The key points to remember are 
the following: 

You need to use a CLLocationManager object. 

You need a delegate that conforms to the 

CLLocationManagerDelegate protocol. 

You should import the cCoreLocation/CoreLocation, h> 
include file. 

You should add Ehe CoreLocation framework to your 
project. 

The location services can be disabled using the 
Settings-keep dial in mind in case your application does not 
work and you do not know why A good way to check it Ls with 
the following code; 

if (locationEervicesArdSnabled — YES) 

f 

// Write your code 

] 

else 

1 

// Inform the user with a UIAlertView 

1 

The allocation class has seven properties: altitude, 
coordinate, course t speed, horizo nlalA ecuracy, verticalAccumcy 
and timestamp > If your hardware does not support some of them, 
the unsupported ones will return -1. 

The distance Filter states how far the position has to move 
before sending out an update to the application. The 
kCLDistanceFttterNone option tells the Location Manager to 
always send an update no matter how far the new position is. 
The command to start the Location Manager is: 

[myLocationManager startUpdatingLocation] ; 

Location services demand battery energy so your 
application should turn the Location Manager oil when not 
needed. The command to turn off die Location Manager is: 

[myLocationManager stopUpdatingLocation]; 

Figure 5 shows three different output screens from the 
FindMe application. The testing was pretty tricky because as 1 
was testing it with my iPhone connected to my iMae, all 1 was 
seeing was the left screenshot in figure 5 (horizontal accuracy 
972m). At first I thought that my code was not working properly 
and I made some small code changes. After going somewhere 
else near my home, I got some different data when I was 
pressing the “Accuracy: Best" button (the horizontal accuracy 
value went automatically from 30m to lOm-fbrget the time 
because l tested it twice). 



Lost Data? 


We can save it! 

Fast • Reliable • Certified 
Secure • Data Recovery 

800.440.1904 

www .drive savers .com 

©2010 Drive Savers Data Recovery Inc. 


Path Finder 

File browsing just got 
more interesting. 



M/C1KH 









* B74- — 

( 1M7 

-f »».» 

,*j Atturnty: Bril 


i Accuracy: Beil 


■;;1 Accuracy fiext 




: AHMK»cyLll)ain \ 


Awiuwry mo™ [ \ 


Mt 

si! 

r 


1 Accuracy: aim. 


'~i Accuracy: :»*n lj 


LAUUde 

37.9405’ 

Lfllnud* 

37.93W’ 

LwHwt* 

J7.93W* 

Umgiiutto 

a.7mr 

UOngllutln 

J3,T«W 

Ltinghucm 

25 . 734 - 

hwlznntal .Accuracy 

8T2m 

htulzantal Accuracy 

3D nr 

Ixli UUI ilol Accuracy 

TD lit 


Figure 5: Three output screens from the FindMe application 


Figure 6 shows another example of the FindMe application 
output. This time I am in a place will a better signal that made 
the application work faster. The first screen after pressing the 
11 Accuracy: 100m", the second after pressing Vl Accuracy: 3tm n 
and tiie third after pressing the n Accuracy: Best” button. 



Figure 6: Another example of the FindMe application output 



List, I will present you an example (figure 7) of HTML5 
Geolocation on my iPhone 4 using mobile Safari, I can tell you 
that the presented address is very precise although I do not live 
in the presented street. 


21:04 


wo%m> 


Browser Geolocalion Lookup, HTML 5 Geoloc... 


I 


www.browsergeo local.., C ■ Google 


Debug Console 

No Errors 





Figure 7: HTML5 Geolocation! 


Summary 

Apple gave us a simple interface to a complex technology. 
Now that you know how to program the Location Manager, 1 
think you should try to use the MapKit Framework that is based 
on Location Manager. If you liked Core Location, the MapKit will 
really impress you! 
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Program note: A word about ARC 

Since 1 wrote the previous article in this senes, Apple has 
released Xcode 42, which is the first release of Xcode to include 
Clang 3 0, Apple's first compiler that supports Automatic 
Reference Counting ("ARC"). 

You've probably heard that Objective-C uses reference¬ 
counting memory management. Previously, you had to manage 
an object's reference count (or “retain count") yourself which 
caused much confusion and difficulty, particularly for those who 
had not yet gotten the hang of it. Now, there is much less of a 
hang to get: The simplest code is very similar if not unchanged, 
and more complex cases are more explicit about what’s going on. 

Consequently, in this and all future installments in this series, 
I shall assume that you are using ARC, 

Now, back to our regularly scheduled article. 

So you want to write a Cocoa or 
Cocoa Touch program, and you know 
Objective-C 

From my last two articles, you now' know enough C and 
Objective-C to be dangerous, and you have a basic understanding 
of what objects and messages are. 

But while it’s one thing to understand a power drill, it's quite 
another to know where best to put the holes. In order to 
effectively use Cocoa or Cocoa Touch, you must know the design 
patterns they follow. 

Following the patterns 

A tool is like a riven You can swim against the current, or 
with it. 

Languages and frameworks are no exceptions. Everything is 
designed to work a certain way; if you try to force it to work a 
different way, you will find it harder than it should be, and you 
may not get the result you wanted and may get a result you didn't 
want. 

Many languages work differently from Objective-C, and 
many frameworks work differently from Cocoa and Cocoa Touch, 
This doesn't make them "wrong”: there is no wrong, only 
mismatched. For example, lets say you Ye coming from another 
great programming language, Python. Coming to Cocoa, you may 


want to use it in Python, You can, but you have to work around 
a lot of subtle and not-sosubtle obstacles and non-obvious 
behaviors, to the point where even an experienced Python 
programmer can feel lost. Cocoa is made to work with Objective- 
C, so it’s easiest to use in Objective-C 

Whatever you use, immerse yourself in it, When you learn a 
new environment, throw yourself into it fully. Don't try to force 
old habits on a new environment; that will only make it harder 
both to write your program and to learn the new environment. 
Let yourself go with the flow. 

With that in mind, here’s the Cocoa flow. 

Ownership 

Objects own other objects. Ownership is not exclusive; 
objects can coown objects. An object can even own the same 
other object multiple times. Taking ownership (or eo-ow r nership) 
of an object is called retaining il 

Every ownership comes with the responsibility to release it, 
And 1 do mean every ownership: If you own it multiple limes, you 
must release it as many times. When every owner of an object 
releases it, the object is deallocated—it dies, 

II two objects own each other, or if you otherwise create a 
circle of ownerships (such as A owns B owns C owns /I), then 
you have an ownership cycle: every one of these objects is owned 
by at least one other object, so none of those objects can die. 
Usually, at least one of those should be a weak reference, which 
turns the circle into a linear chain; then, breaking any of the 
strong references along the chain will enable the part of the chain 
that is thus cut off to be deallocated. 

References 

Objects know about other objects. An ownership is a strong 
reference, merely knowing about another object, without owning 
it, is a weak reference. It is possible to both own (strongly 
reference) and know about without again owning (weakly 
reference) the same object. 

The strength of a reference is described by the property or 
variable that holds it. This is where the memory-management 
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policy keywords described in the previous article come in. For 
example: 

roperty(strong) MyObjeet *objectWeOwn; 

@property(weak) MyGbjeet *obje ctlrf eOnlyKnovAb□ut: 

Similar keywords exist for variables, and are described in the 
Objective-C language documentation. 

You establish a strong reference to an object by assigning the 
object's pointer to a strong property or to a local variable. You 
break that strong reference by assigning something different to 
that property or variable. 

Just as with messages, it's valid and harmless to do this with 
nil. tiie pointer to no object; variables (and properties) initially 
hold nil, and you release an object without replacing it with a 
different one by assigning nil instead. 

When there are no remaining strong references to an object, 
the object gets deallocated; when that happens, any weak 
references to it are cleared out—that is, set to nil. (This feature, 
called “zeroing weak references", is new in Lion and iOS 5 and 
Specific to ARC; previously, weak references could only be 
declared with the assign keyword, and such references do not 
get automatically set to nil, so you had to be careful with diem.) 

Model-View-Controller (MVC) 

This is the big one—so important that I had to stick it here 
in the middle of the list because I can’t explain some of the 
smaller things until I explain this, but I needed to explain other 
things before this. 

In MVC, you factor your application into three major sections: 


Model: Objects that embody the things the user is working with. 
Generally, whatever objects the user thinks they are 
manipulating should be model objects in your code. 

View r : Objects that display model objects to the user and respond 
directly to user input events (including mouse dicks, taps, 
scrolls, and key-presses). Cocoa and Cocoa Touch provide 
some generic views, such as text fields and table views, but 
its also possible to make custom views, which are 
subclasses of NSView in Cocoa or UlView in Cocoa 
Touch. 

Controller: Objects that own parts of die model and/or view 
hierarchy and communicate between diem. 

There are some odier kinds of objects dial don't fit into die 
MVC triumvirate. Common kinds in Cocoa and Cocoa Touch 
include: 

Value: An object that represents some piece of data, on its own, 
independent of any context Foundation provides a number 
of classes of value objects, including id! of the property-list 
classes. AppKit and LJIKit each provide an image class dial 
also counts. 

Helper: An object that does a task, rather than embodying a tiling. 
NSURLConnections, NSTimers, and 

NSOperations are among the Foundation-provided 
helper objects. 

You usually don'l make your own value or helper classes; 
Cocoa and Cocoa Touch have classes already made for aU of die 
most common value and helper needs. The main exception is 
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NSOperatioru which expressly encourages creating a subclass 
for each tiling you'll need done. 

Value objects are typically created by or for model objects, 
while helper objects are created, owned, and used by controller 
objects. View objects sometimes create their own helpers (e.g,, for 
animations), and either get value objects passed to them directly 
by a controller or extract them from the model 

Coming back to MVC, the classes in those categories are the 
ones you typically make yourself, and customize to the greatest 
extents. 

Delegation 

Some objects can report progress and/or inquire about 
decisions to another object. That object is called its delegate. 

Delegates are almost always weak references. The delegate is 
often the owner of the delegating object, so making the 
delegating object’s reference to the delegate a weak one averts an 
ownership cycle. A few objects do strongly reference (retain) their 
delegates; NSUHLConnection is one example. If the 
documentation doesn’t tell you that the object will retain its 
delegate, you can expect that it won’t, 

A delegate is usually optional, but not always. Some objects 
make no sense without a delegate; NSURLConnection, again, 
is one example. 

A delegate relationship should include a protocol for the 
delegate to conform to and fulfill. The delegate property should 
be typed as a pointer to an object that conforms to the protocol 
(id <FooDelegate>); this way, the delegating class does not 
need to test the delegate for every required delegate method, nor 
does its implementation need to implement all of the delegate 
methods in a category on the NSOb ject class. 

The importance of the object graph to 
memory management 

A well-architected program has a dear directed graph of 
ownerships through your objects, Here’s an example graph based 
on my small single-window applications: 



Figure 1 - Graph of principal objects in a single-window application, 
including the controller, model, and view objects. 


Having a straightforward graph like this resolves the memory 
management question. Suppose I delete a Person: 



Figure 2 - Revised graph after deleting a model object. The value objects 
that the model object owned were released and deallocated in turn. 


1 don’t have to worry about the value objects, because 1 
know that die model objects own them, so I know that die model 
objects will release them as part of that contract. Moreover, if die 
value objects don’t get deallocated, or if they get deallocated too 
early, it’s clear where to look: at each of the leaked or 
prematurely-deallocated objects' owners. 

If all of the owners 1 expected seem to be in order, I can look 
at the object’s history in Instruments. If I see an ownership 
C retain’’) that 1 don’t expect and that isn’t balanced out. I can 
eidier break that ownership (if possible) or make changes to 
ensure that that previously-unexpected owner releases the object 
at the proper time. Likewise, if I see a release that does not 
correspond to any previous retain (an over-release), then I can 
either remove that release (if possible) or establish an ownership 
for it to balance out, 

Notice that the view, which knew about (but did not own) 
the model object that it was displaying, now has only a pointer to 
no object This happens so automatically that its accessor for that 
property, if it has one, is not called, the instance variable is simply 
reassigned nil. This means that the view does not know that that 
state has changed; it will not have an opportunity to, for example* 
set itself as needing to redraw. 

Looking back at die top of the graph, you’ll see that the 
applications delegate (and I do make a separate object that is 
nothing but that) owns my controller. More specifically, I have this 

code in my application s delegate (this is for a Cocoa application): 

- (void) applicationWillFinishLaunching;[NSNotification 
*)notification ! 

controller = [MyControllei new]: 

I 

- (void) applicationWillTerminate: [^Notification 
*)notification ! 

controller - nil: 

) 

//For single-window apps only: ensure that the app quits when 
the user closes the window 

- (BOOL) 

applicationShouIdTerminateAfterLastWiiidowClosed:(NSApplication 
*)app I 
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return YES: 

Tills code does several things: 

• First and most obviously, when die application is about to 
“finish launching" (this has a specific meaning which Ls 
documented in the NSApplication class reference), it 
tells its delegate that, and the delegate responds by creating 
my controller. My controller will load the model and the 
primary window when it's created 

♦ Second, when the application is about to terminate (quit), the 
application's delegate releases the controller The controller 
will deallocate, taking everything it owns with it. 

* Third, die application will ask the delegate (if it responds to 
this question) whether it should terminate when the user 
doses the last window. In a single-window application, it 
should, so the delegate responds by returning YES. This can 
be omitted when it would unconditionally return NO, as that's 
the default. 

The significance of Model-View- 
Controller 

You can see dial die model-view-controlfer pattern Ls 
reflected in die object graph. My controller owns both the model 
(in my case, usually an array of some kind of model objects) and 
a window in which to display it. 

You may wonder why there aren’t two controllers, one 
owning the model and one owning the window, That's just as 
valid; for my small single-window apps, a single controller is 
easiest and not too unwieldy. For a larger app, breaking the 
controllers up may be a very good idea. 

On the Mac, there are a couple of ways that happens. In a 
document-based Mac application, the document is a model- 
controller, and it owns one or more window-controllers. In any 
application, window or view controllers may also own model- 


controllers, in die form of instances of the NSController 
classes. The most commonly used are NSAr ray Controller 
and NSTreeController, and you Typically create these in 
your nib. 

In Cocoa Touch, its version of Core Data provides 
NSFetchedResultsController. Apps based on Core 
Data typically have a an instance of 
UTTableViewController (or of a subclass thereof) that 
creates and is the delegate of an 
NSFetchedResultsController; the table view 
controller, as the table view’s data source, is asked by the Lable 
view what to display, and the table view controller asks die 
fetched results controller in turn. 

For the model, you have two choices; either use Core Data, 
or write your own model objects dial inherit directly from 
NSObject. (If you use Core Data, you can still create custom 
model classes, but they must inherit from 
NSManagedObject.) Your model classes are good places to 
put model-specific, user-interface-agnostic logic, such as derived 
properties (properties whose value you compute on demand 
from the values of other properties) and custom initializers. 

The simplest model objects are simply collections of 
synthesized properties, but even then, don't simply use value 
objects, such as dictionaries, as model objects. Even if you don’t 
need any logic in your model yet, it is better, and far less work, 
to plan for the future and make a simple model class now than to 
have to replace a bunch of dictionary-dependent code later. Plus, 
property-access expressions read much more fluidly than a lot of 
objectForKey: and setObject: forKey: messages. 

As you can see, there are a number of variations on the 
ModebView-Controiler pattern, but there’s still a recognizable 
commonality among all of litem; The controllers) own the model 
and view, and communicate changes between them, 
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Cocoa interface patterns 

As a software developer, its easy to lose oneself in thinking 
about the code, but thinking about nothing but code will result in 
an application that is mediocre at best. 

To make a great application, you must also think about die 
user interface. This is vital to die usability of your application, and 
it informs how youII lay out much of die code dial powers it. 

With diat in mind, here’s a list of different ways an 
application can work from the user’s perspective, along with how 
each interface pattern is reflected in die code. This is a partial list; 
a full inventory would lie at least one entire ardde unto itself. 

Single-window vs, multiple-window 

On the Mac, it’s normal for an application to have multiple 
windows. From the perspective of window management, every 
application has at least several windows, even if you only create 
one: the About panel, Find panel, Font panel, Color panel, and 
Spelling panel all count. 

Nonetheless, a couple of common designs include a single 
window that die user does all their work in. I call this the “primary 
window 11 ; it's tempting to call it the "main window", but Cocoa 
uses that term for something else (the window that has the active 
appearance). 

Each window, whether or not it’s the only one, typically has 
one controller that owns it. This may be an instance of 
NSWindowController or of a subclass, or a custom object 
(instance of a subclass of NSObject) that loads the nib (or 
creates and populates the window programmatically) in original 
code. Either way, that controller owns the window and may own 
the model as well. 

Master-detail 

Most single-window applications break the model into two 
principal views: 

* The master view, which is a table or collection view listing 
items. 

* The detail view, which is a view or group of views that 
examines aspects of the item that is selected in die master 
view. 
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Figure 3 - Sketch of a master-detail layout in a single-window 
application. 


In a multiple-window application, each window examines a 
single item, but there can be a master-detail view within each 
window. For example, if each window represents a Department, 
the window could have a master view listing Employees within 
that Department, and the detail view would show the name, title, 
office or cubicle number, etc. of die selected Employee. 

A variation relegates the master view to a table view along 
the left side: 



Figure 4 - Sketch of a window with a source list and detail view, plus a 
bottom toolbar. 


The master table view is called the source list (named for the 
one in iTunes, which actually calls its entries in this list "sources"), 
and the view to its right, taking up die majority of the window’s 
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content area, is called the detail view. The two views will 
commonly be in a split view, enabling the user to easily adjust the 
apportionment of space. 

Regardless of die layout, a master-detail interface is typically 
backed by at least two controllers, one feeding each view. When 
sticking to standard AppKit views, such as table views, they're 
commonly NSArrayControllers, with a custom controller 
or window controller owning both the window and die table 
controllers. Otherwise, one or both views may be owned by 
NSViewControllers, with each view fed by either its owner 
or (if its owner is a non-subdassed NSViewControiler ) a 
third, custom controller. 

Canvas layout 

K r ^ _ fHjuni 



Figure 5 - Illustration of a simple image editor or viewer, showing shapes 
on a canvas. 

An application that uses the canvas layout devotes more or 
less the entire content view of the window to showing content on 
a 2D plane or in a 3D space. Image editors are a common 
example: Whether you paint pixels or place polygons, you do so 
on a canvas. The content doesn't need to be an image, though; a 
text view, as in a word processor, can lie the canvas as well. 

A close relative of the canvas is the timeline: 
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Figure 6 * A screenshot of Amadeus Pro, an audio editor, showing a 
waveform in a timeline. 

like a canvas, a timeline shows the content in a 2D space, 
usually frames or amplitude over time. Timelines usually have 
more supplementary UI in die window, though, where a canvas 
stands alone. 


A timeline that doesn't stand alone Ls often both a master and 
a detail view. In Movie, the timeline is the detail view to the 
Project Library pane, which lists projects in the Library, and its the 
master view to the preview pane, which shows the frame at the 
current selected position. 

Canvases and timelines are most often seen in document- 
based applications, but can show up in a single-window app as 
well, usually as pan of a greater layout rather dian the main view, 
as demonstrated by both iMovie and iPhoto. 

A canvas (or timeline) layout is likely to have a reladvely 
simple controller layer, but a very complex view layer: Either the 
views will be many and varied (such as the views for different 
kinds of placeable objects in a vector image document), or diere 
will be a single view that Ls itself complex (such as a timeline view 
in an audio editor). 

Inside a single-window application 

The single window is typically managed by a window 
controller (instance of NSWindowController). The window 
controller may be the same object that owns and manages the 
model, or they may be two separate objects, either both created 
by the application's delegate or one creating and owning the 
other. 

In a complex single-window application, particularly with 
views that can be shown, hidden, or switched for other views, you 
may make your window controller an instance of a subclass of 
NSWindowController that creates and owns view 
controllers; those view controllers are then responsible for loading 
their views when they're needed. Views own their subviews, so a 
view loaded by a view controller and inserted into the window's 
view hierarchy will be coowned by both its superview and the 
view controller. 

Document-based applications 

A document-based application typically has one window per 
document, where a “document" represents a hie on disk (or what 
may become a file on disk, if the user has just created the 
document and not yet saved it). As such, it falls squarely under 
the multiple-window heading. 

In a document-based application, the shared 
NSDocumentController instance creates and manages 
instances of subclasses of NSDocument. You create these 
subclasses, at least one for every document type you handle. Each 
document object is a model-controller, and creates and owns at 
least one window controller. 

Ill patterns that are common in single-window applications 
can work in document-based apps as well; the main difference is 
that instead of a single window for a single library, there is one 
window for each document. The layout and controller backing of 
the views Ls otherwise unchanged; only the ownership of the 
window(s) is different. 

Inspecting the details 

In many applications, particularly those with canvas or 
timeline interfaces, the user may need to view or edit details of 
tlie portion of the content that they have selected. 
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A detail view may not be appropriate for this. If you’re using 
master-detail at all, the canvas will probably be the detail view. In 
a pure canvas interface, the closest thing to a detail view may l>e 
some sort of status bar, showing such tilings as a word count or 
loupe and maybe a 200 m control 
Enter the Inspector panel: 
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Figure 7 - A screenshot of Pages' Inspector panel 

The Inspector shows attributes of the selected object or 
region, and usually also enables the user to edit those attributes. 
An laspector Is typically a floating (utility) panel. In a 
document-based application, such a panel should be owned by a 
window controller that is a singleton object, and is thus shared 
among any and all documents. Each document updates the 
Inspector to reflect its own selection whenever one of its windows 
becomes the main (active) window. 

If an Inspector has multiple tabs or panes, each may be 
governed by a view controller, to reduce the amount of code that 
must be piled into the Inspector window controller. Inspectors 
that pre-date view controllers are likely to have very long 
implementations and lists of outlets. 

An alternative to the Inspector-as-panel, introduced in Mac 
OS X 107 and iOS 3.2, is the popover. A popover owns a view 
controller that owns the view to show in the popover. Where a 
panel floats on-screen at all times unless explicitly closed and is 
not visibly attached to the main window, a popover is dismissed 
by any user action in the main window and is visibly connected 
to something within the main window ( whatever it is inspecting). 
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Popovers are much more transient than floating panels. A 
floating-panel Inspector is visible from the time the user summons 
it until the time the user dismisses it; when the user changes their 
selection, the panel stays visible and simply updates its values 
from the new selection. A popover, on the other hand, comes 
only when summoned and usually goes away whenever die user 
clicks or taps anything in the main window or view, including 
deselecting their selection or selecting something else. 

Since a popover is visibly connected to a content object in a 
window or view, it's typically created and owned by the controller 
for the window or view where it will appear. 

Cocoa Touch interface patterns 

Single-window vs, multiple-screen 

Apps are single-window only. There’s no window 
management on iOS: No title bars, no resizing, no Mission 
Control. 

You can create another window, but the only reason to to do 
so is to display content on an external display. The iPhone 4S and 
iPad 2 support automatic video mirroring, but no other devices 
do: no older iPhones, nor older iPads, nor any (yet released) iPod 
touch. In order to display content on an external display on older 
devices and any iPod touch, you must create a second window 
on iL, which will have its own view controller hierarchy, and you 
must maintain those view controllers' state in parallel with that of 
the main window's view controller hierarchy. 

View controllers 

Every Cocoa Touch app’s interface is driven by view 
controllers. The simplest apps have only one view' controller; 
more complex apps have a hierarchy of them. 

There are a number of ways to organize that hierarchy, 
including navigation controllers, split view controllers (only on the 
iPad), and a tab bar controller. These are all different kinds of 
view f controllers, and they can even be combined: you can, for 
example, have a tab bar controller where one of the tabs is a 
navigation controller whose first view controller is a split view 
controller. 

Each view controller has a view hierarchy: The VC owns one 
view, and that view may have any number of subviews. 

You’ll probably create your own subclasses of 
UlViewController, each with outlets to its view’s subviews, 
such as text fields, sliders, and custom views. Your subclasses will 
also likely respond to action messages that its controls send, and 
should know about a model controller with which to 
communicate changes to and from die controls. 

Common object roles 

Every object serves a purpose, and some of these purposes 
come up rather frequently. Here’s a run-down. 


Figure 8 - A screenshot of a popover in iCal. 
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Application's delegate 

Both NSApplication and UI Application have a 
protocol and property for a delegate, and nearly every Cocoa 
or Cocoa Touch application appoints one. In fact, it’s so 
common that the UIApplicationMain function in Cocoa 
Touch takes a class as a parameter specifically for creating and 
appointing the application delegate, (This is how all of the iOS 
app project templates included in Xcode 4,2 do it.) 

It’s extremely tempting to set one of your controllers as 
the application's delegate, but this is a bad idea, 99% of the 
time, the responsibilities of the application's delegate have 
nothing to do with what that controller should be doing. Ids 
better to create a separate object that is the application’s 
delegate and, in applicationWill- 
FinishLaunching ; (which is part of being the 
application’s delegate), creates your controller and puts it to 
work. 

Every object should have one well-defined area of 
responsibility. Separation of the application’s delegate from 
other controllers is one application of that rule. 

Window controller 

As the Mac is a multiple-window system, it’s very common 
to have an object that owns each of your windows. These are 
usually instances of NSWindowControlier, or of some 
subclass. 

As mentioned above, in a document-based application, 
each document owns at least one window controller, one for 
each of the document’s windows. 

Cocoa Touch applications are all single-window, so 
window controllers exist only on the Mac, not on iOS—they 
aren’t needed on iOS, As such, UIKit has no counterpart to 
NSWindowController. 

View controller 

Whenever views have to be swapped in and out of a 
window, or even just loaded on demand rather than all at once, 
it’s usually a view r controller that does it. 

On the Mac, view r controllers are fairly uncommon, partly 
out of unfamiliarity and partly because the 
NSViewController class is pretty light-weight. Most apps 
have all view-oriented controller logic in the window 
controller. Making and using view r controllers is certainly valid, 
though, and may become more common as more developers 
come to the Mac from iOS. 

View controllers are far more common on iOS, as 
UI ViewCont roller is about as featureful as, and often 
fills an equivalent role to, NSWindowController, See 
above for my explanation of the nature and significance of 
view' controllers on iOS. 

The run loop and the application 

In many GUI frameworks, you have to write a loop that 
calls a function that returns the next event (mouse click, tap, 
key-press, etc.) from the user. If no events are waiting to be 
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processed, that function may block (like the old Macintosh 
Toolbox’s WaitNextEvent) or simply return no event (like 
Lhe Toolbox’s GetNextEvent). In some frameworks, you 
may even have to handle these events yourself; for example, 
hit-testing a mouse event’s x and y coordinates to find just what 
the user clicked on, and then dispatching to the correct part of 
your application (if any) to handle that click. 

Cocoa and Cocoa Touch handle this for you, which takes 
a lot off your plate. Both NS Application and 
UIApplication receive events using the run loop, which 
is provided by the Foundation framework. You simply call 
NSApplicationMain or UIApplicationMain, and 
that kicks everything off 

You also almost never need to ask for an event from the 
event queue, as the application dispatches events for you as 
well. Much of this involves sending them up the responder 
chain (which 1 won’t get into here; it’s well-documented in 
both the Mac and iOS documentation libraries). The 
application is the last responder in the chain, so that if the 
event comes back to it, it can do nothing-else-handled-thls- 
event processing (such as beeping when the user presses a key 
with no view' focused to receive it). 

The run loop is good for more than just events. Timers, 
delayed performs, NSURLConnections, the main-thread 
NSOperationQueue, and numerous other things are all 
multiplexed through the run loop. Making the run loop work 
for you is a good way to avoid using threads and maintain 
responsiveness when all you need is to do a little work without 
blocking the UI. 

Wrapping up 

I’ve only shown you die tip of the iceberg. There are 
plenty of other elements of Cocoa and Cocoa Touch that I had 
neither time nor space to cover here, including blocks, 
exceptions vs. errors, and KVO. Apple’s documentation 
includes many guides, including the Cocoa Fundamentals 
Guide thaL together give a complete overview of all of Lhem. 

But I’ve showm you enough that you now know r how 
Cocoa expects you to construct your application, so you can 
do so with the least resistance. 

Next month, I'll be getting back into nitty-gritty syntax 
matters, as I’ll delve into the intricacies of @ property 
declarations. 
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MacTech Conference 2011 has 
just wrapped up and it was an 
incredible time. 

This month, we’re putting the 
Spotlight on the people and 
events that shaped the 
Conference. 




Andy Ihnatko asking a question in a 
way that only Andy can 


Guy Kawasaki keynote What I 
learned from Steve Jobs" 


James Wilson talks "Beyond the Gradient" in the developer track 


Bowling is just one of the many activities 
during the Conference Party 


Aaron Hillegass of Big Nerd Ranch 
talks about "Going Mobile" 


Neil Ticktm welcomes everyone to the event 
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The weather allows for a great dinner outside 

■Pfl 


Chris Rojas (right) takes questions from attendees. 


Attendees enjoying a session 


Developer Track Sessions Chair 
Steve "Scotty" Scott moderates questions 
from the audience. 


Sean Costello talks about monitoring Crash Plan backups 
to Russell Poucher, CV Rao, and others) 




After a backlot tram tour, Universal Studios gives 
MacTech Conference attendees a behind the scenes 
tech talk on the making of King Kong 3D 


M/OKH 
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Scott Meal talks "Ins and Outs 
of Preferences." 
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Every business 
needs a Small Dog 
to help it grow. 

Small Dog Electronics, New England’s largest Apple Specialist, 
has the expertise, products and services to support your 
technology needs. 

I~I Everything Apple®, peripherals and accessories 
rI Remote training and technical support 

□ iOS integration and deployment 
l~ 1 Cross-platform solutions 

□ Mobile device management solutions 

Small Dog 

Electronics 

/Wiawjs By Vjoux ‘SuU 

800-511-MACS 



Apple Specialist 


www.smalldog.com/mactech 


Consultants Network 





Consumer camera ana 
low cost and give you lull 
lOeOHD video? Imagine 
your event in full HDE 


Blacl<magi 


* See all your cameras and 
program video output 
using a single TV with the 
built in multi view. 


Includes control software 
few Mac and PC plus 
Photoshop plug ins For 
direct graphic downloads. 



Rack mount design HDMI inputs let you plug You can even plug in 

lets you install intg nggd In HD video cameras or bm^dcsst cameras Wing 

case? for portability computer? for slide shows! the 5Q/HD-SOI inputs. 


USB 2.0 connection lets you record SDi and HDMI program outputs Ethernet lets you plug direct 

direct to H£WI files for iPhone, i Pad for sending ywr I we program tu your computer for control 

and web Includes Media Express. feed to your audience! and uploading graphics. 


If you've ever wanted to get into the television 

industry, then here's how! 


Enter the exciting world of live television production with the new ATEM 
Television Studio I Simply plug in up to S cameras with HDMI or SDI connections 
and ATEM will re-sync the video and allow transitions, effects, graphics, 
animations, chroma keying, all completely live, and at the push of a button! 
Unlike editing software, live production is the most exciting, lowest cost, and 
fastest way to generate professional programs. You can even broadcast live to 
your audience and over the internetl 

Live Creative Power 

ATEM Television Studio operates as a professional M/E style 
switcher, so you can take your skills into any broadcast TV 
station! You get the most creative solution for live switching, 
with cut, mix, wipe, dip and morel You can even bad graphics directly from 
Adobe Photoshop into the 2 built in media players for live keying! 

Incredible Features 

Only ATEM includes upstream chroma key for green and 
blue screen shooting. You also get pattern, shaped and linear 
keying, 2 downstream keyers, 2 built in media players and 
morel The built in multi view allows all cameras, preview and 
program to be viewed on a single SDI or HDMI monitor or television, so ATEM is 
perfect for portable location use! Now you can cover any live event, anywhere! 


More Connections and H.264 

ATEM Television Studio includes bads of SDI and HDMI 
connections for professional SDI cameras or HDMI consumer 
cameras! All inputs feature re-sync so you can plug in 
anything! You also get 5D3 and HDMI outputs, plus built irr H.264 encoding for 
generating files for the internet, iPhone, iPad and more! Imagine live production 
direct to H.264 QuickTime files for instant viewing! 

Built to Perform 

ATEM uses a familiar M/E style of operation so you get an 
instantly familiar workflow thatls fast and easy to use. ATEM 
includes a software based control panel for Mac and Windows! 
If you need a hardware control panel then simply add the 
ATEM 1 M/E Broadcast Panel for a true broadcast grade solution. Thousands of 
ATEM switchers are used today for live broadcast events such as sports, music 
festivals, drama, reality TV and much more! 


ATEM Television Studio 

*995 







Learn more today at www*blackmagic-design,com/atemtelev(sionstudio 





































